azure-sentinel
There are 8 repositories under azure-sentinel topic.
- sentinel-attack
netevert / sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
Language:HCL 1038 eshlomo1 / Microsoft-Sentinel-SecOps
Microsoft Sentinel SOC Operations
Language:PowerShell 229ashwin-patil / blue-teaming-with-kql
Repository with Sample KQL Query examples for Threat Hunting
briandelmsft / SentinelAutomationModules
The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel
Language:PowerShell 187noodlemctwoodle / pf-azure-sentinel
Parse pfSense/OPNSense logs using Logstash, GeoIP tag entities, add additional context to logs, then send to Azure Sentinel for analysis.
jostuffl / AzureSentinel_Stuff
A collection of things I've created or found that I think is useful for Azure Sentinel.
Language:Jupyter Notebook 12- kusto.blog
y0nil / kusto.blog
A technical blog about Kusto
Language:HTML 11 austin-lai / Collection-of-Azure-Monitor-or-Sentinel-Kusto-Queries
Collection of Azure Monitor or Sentinel Kusto Queries
Collection of Azure Sentinel - Playbook | Logic App (Template)
hisashin0728 / SentinelAzureOpenAI
Microsoft Sentinel / Azure Open AI 演習のレポジトリです。
SvenAelterman / AzSentinel-syslogfwd-HA
Azure ARM (bicep) template for deploying a high availability syslog/CEF forwarder setup using Azure VMs.
Language:Bicep 4clouddrove / terraform-azure-sentinel
This terraform module is designed to create azure Sentinel resources. Microsoft Sentinel natively incorporates proven Azure services, like Log Analytics and Logic Apps. Microsoft Sentinel enriches your investigation and detection with AI. It provides Microsoft's threat intelligence stream and enables you to bring your own threat intelligence
Language:HCL 3Cyberproof / Azure-Sentinel-Logstash
A containerized Logstash ready to send data to Log Analytics or Event Hub
mtnmunuklu / AzureSentinelToExcel
This project used for convert azure sentinel rules to excel
Language:Python 3- Language:PowerShell 2
Collection of Azure Sentinel - Analytics Rules (Template)
AutoClosing-SAMPLEALERT-FromMDfC
This repository provides summarization Schedule Analytics Rules in Sentinel Incident
McL0vinn / MicrosoftDefender-DiscordCNC
Threat-Hunting KQL query which identifies machines that utilize powershell, cmd or wmic to connect to any URL that includes “cdn.discordapp.com” ,where the action was initiated by a script execution ( .vbs , .bat etc)
Simple KQL query that can be run either in MD for Endpoint (Threat hunting or Custom indicator) or in Azure Sentinel (Threat hunting or analytics rule).It's looking for 4 known IOCs related to the Kaseya attack
mlaraibkhan / az.sentinel-security-content
Microsoft Sentinel Custom Content
Language:Python 0quantum-sec / terraform-azurerm-workbooks
Terraform modules for deploying and managing Azure workbooks.
Language:HCL 0epomatti / azure-sentinel
Sentinal capabilities implemented
Language:HCLThis Repository provides notification to Microsoft Teams by Adaptive Card.
miguel-pgomes / Azure-content
Azure related content
