MSTI's starred repositories
Hunting-Queries-and-Detection-Rule-Microsoft-Sentinel-Defender
KQL Sentinel and Defender Detection and Hunting Queries.
Hunting-Queries-Detection-Rules
KQL Queries. Microsoft Defender, Microsoft Sentinel
Hunting-Queries-Detection-Rules
KQL Queries. Microsoft Defender, Microsoft Sentinel
Ethical_Hacking_and_Penetration_Testing
This repository is all about tips on ethical hacking and penetration testing!
Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
Copilot-for-Security
My personal work with Copilot for Security
AzureMonitorCommunity
An open repo for Azure Monitor queries, workbooks, alerts and more
Azure-Governance-Visualizer
Azure Governance Visualizer aka AzGovViz is a PowerShell script that captures Azure Governance related information such as Azure Policy, RBAC (a lot more) by polling Azure ARM, Storage and Microsoft Graph APIs.
Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
vulnerable-AD-plus
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
ResearchDev
ResearchDev - XDR & SIEM Detection
SecurityResearcher-Note
Cover various security approaches to attack techniques and also provides new discoveries about security breaches.
azure-docs
Open source documentation of Microsoft Azure
Sentinel-Queries
Collection of KQL queries
Microsoft-Defender-for-Cloud
Welcome to the Microsoft Defender for Cloud community repository
Microsoft_365_Certified_Enterprise_Administrator_Expert
The repository for exam preparation for Microsoft 365 Certified: Enterprise Administrator Expert!
Cloud-Security-Attacks
Azure and AWS Attacks
Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector
Repository with all the MPARR components solution
WindowsDefenderATP-Hunting-Queries
Sample queries for Advanced hunting in Microsoft Defender ATP
PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework