jthiaggo

O365-InvestigationTooling

logicapps

Azure Logic Apps labs, samples, and tools

Hunting-Queries-and-Detection-Rule-Microsoft-Sentinel-Defender

KQL Sentinel and Defender Detection and Hunting Queries.

RetrievIR

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

sigma

Main Sigma Rule Repository

Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

MSTI

Config files for my GitHub profile.

Ethical_Hacking_and_Penetration_Testing

This repository is all about tips on ethical hacking and penetration testing!

Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

Copilot-for-Security

My personal work with Copilot for Security

AzureMonitorCommunity

An open repo for Azure Monitor queries, workbooks, alerts and more

ITDR

Collection of Microsoft Identity Threat Detection and Response resources.

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Azure-Governance-Visualizer

Azure Governance Visualizer aka AzGovViz is a PowerShell script that captures Azure Governance related information such as Azure Policy, RBAC (a lot more) by polling Azure ARM, Storage and Microsoft Graph APIs.

detection-rules

Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

vulnerable-AD-plus

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

ResearchDev

ResearchDev - XDR & SIEM Detection

MDEtester

MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.

KQL

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

SecurityResearcher-Note

Cover various security approaches to attack techniques and also provides new discoveries about security breaches.

azure-docs

Open source documentation of Microsoft Azure

Sentinel-Queries

Collection of KQL queries

Microsoft-Defender-for-Cloud

Welcome to the Microsoft Defender for Cloud community repository

Microsoft_365_Certified_Enterprise_Administrator_Expert

The repository for exam preparation for Microsoft 365 Certified: Enterprise Administrator Expert!

Cloud-Security-Attacks

Azure and AWS Attacks

Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector

Repository with all the MPARR components solution

WindowsDefenderATP-Hunting-Queries

Sample queries for Advanced hunting in Microsoft Defender ATP

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework