aprakash13

Notes

dfiq

DFIQ is a collection of investigative questions and the approaches for answering them

Conferences

Conference presentation slides

SecurityResearcher-Note

Cover various security approaches to attack techniques and also provides new discoveries about security breaches.

ircapabilities

Incident Response Hierarchy of Needs

Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Sentinel_KQL

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

GCTI

KQL

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

KQL

Michael Melone's Kusto Query library

protections-artifacts

Elastic Security detection content for Endpoint

awesome-kql-sentinel

A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

kql-for-dfir

A guide to using Azure Data Explorer and KQL for DFIR

Microsoft-Defender-for-Cloud

Welcome to the Microsoft Defender for Cloud community repository

validate-detections

GitHub action for validating Microsoft Sentinel detection rules

KQL

Kusto Query Language

msticpy

Microsoft Threat Intelligence Security Tools

FalconFriday

Hunting queries and detections

MustLearnKQL

Code included as part of the MustLearnKQL blog series

system-design-interview

System design interview for IT companies

Sentinel-Queries

Collection of KQL queries

Microsoft-Sentinel-SecOps

Microsoft Sentinel SOC Operations

detection-rules

AzureSentinelKQLScripts

Various tools used to monitor and troubleshoot Azure Sentinel data

Detection-Ideas-Rules

Detection Ideas & Rules repository.

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

advmlthreatmatrix

Adversarial Threat Landscape for AI Systems

interview

Everything you need to prepare for your technical interview