Gold's repositories
awesome-kql-sentinel
A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel
000
Azure-Sentinel-4-SecOps
Azure Sentinel 4 SecOps
Language:PowerShellMIT000
DCSecurityOperations
A collection of Microsoft Sentinel workbooks and analytics rules.
000
FalconFriday
Bi-weekly hunting queries
BSD-3-Clause000
sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
Language:HCLMIT000
Sentinel-Queries
Collection of KQL queries
000
sysmon-config
Sysmon configuration file template with default high-quality event tracing
000
Threat-Hunting-and-Detection
Repository for threat hunting and detection queries, tools, etc.
000