juergmeier

awesome-soc

A collection of sources of documentation, as well as field best practices, to build/run a SOC

AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

sentinelninja

My Azure Sentinel Ninja ideas, thoughts and contributions

SentinelKQL

Azure Sentinel KQL

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

FalconFriday

Hunting queries and detections

Microsoft-Defender-for-Cloud

Welcome to the Microsoft Defender for Cloud community repository

Azure-Design

My Azure stencil collection for Visio. Highly functional and always up to date.

hawk

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

MDI

Azure-Advanced-Threat-Protection

Additional Resources to improve Customer Experience with Azure Advanced Threat Protection

log4shell

Operational information regarding the log4shell vulnerabilities in the Log4j logging library.

Sentinel-Queries

Collection of KQL queries

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

AzSentinelPowerShell

Azure Sentinel PowerShell cmdlets

SecurityBenchmarks

Supplemental information and resources for the Security Benchmark documentation available at https://docs.microsoft.com/azure/security/benchmarks/.