defender-for-endpoint

There are 5 repositories under defender-for-endpoint topic.

Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
azure defender-for-endpoint dfir kql sentinel threat-hunting vulnerability-management zero-day blueteam cybersecurity mde mdi infosec security misp
Language:Python 1020
FalconForceTeam / FalconFriday
Hunting queries and detections
kql blueteam hunting purpleteam sentinel defender-atp defender-for-endpoint
658
Threat-Hunting-and-Detection
Cyb3r-Monk / Threat-Hunting-and-Detection
Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).
threat-hunting threat-detection cybersecurity defender-for-endpoint detection-engineering dfir kql kusto-language microsoft-sentinel
Language:Jupyter Notebook 566
MDATP
alexverboon / MDATP
Microsoft Defender XDR - Resource Hub
blogs defender-for-endpoint defender-for-identity kql learning microsoft-defender-xdr threathunting defender-for-cloud-apps defender-for-office-365
Language:PowerShell 444
lawndoc / AdvancedHuntingQueries
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant
security cybersecurity kusto kql hunting threat-hunting detection detection-engineering microsoft microsoft365 defender-for-endpoint defender defender-atp cyber-security xdr
94
jischell-msft / RemoteManagementMonitoringTools
Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
defender-for-endpoint kql mde security threat-hunting remotemanagement rmm
Language:PowerShell 64
MHaggis / ASRGEN
ASR Configurator, Essentials and Atomic Testing
asr defender-for-endpoint windows attack-surface-reduction
Language:Python 28
13ihsan92 / Security-Blue-Team
This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.
automation cybersecurity defend defense defensive-security endpoint-security siem siem-development soar defence defender-for-endpoint defensive security-automation security-hardening security-tools
17
PSMDE
Visorian / PSMDE
Microsoft Defender for Endpoint PowerShell module
defender-for-endpoint powershell security
Language:PowerShell 13
alexverboon / IntuneCustomCompliance
Microsoft Intune Custom Compliance
compliance-profiles defender-for-endpoint json powershell-script security-audit microsoft-intune
Language:PowerShell 12
microsoft / python-for-security
Python for Security is the home of all open source Python projects that can integrate with Microsoft Technologies.
security python mde defender-for-endpoint
Language:Python 10
gh-andrem / DefenderXDR-AdvancedHunting
Defender XDR Advanced Hunting Queries (MDE, MDAV, Device Discovery)
kql advanced-hunting defender-for-endpoint m365-defender defender-xdr
Language:PowerShell 7
Smalls1652 / mdatp-pwsh
A PowerShell module to interact with Microsoft's Defender for Endpoint API.
powershell defender-atp dotnet-core defender-for-endpoint
Language:C# 7
shehanperera85 / KQL-Engine
Repo includes KQL queries that you can run in your Azure Log Analyics environment.
azure defender defender-for-endpoint kql kusto queries query-language sentinel
5
K9-Defender
Mora-Bytes / K9-Defender
K9-Defender is highly Simple with a Sophisticated Watchdog System and a Powerful Process Scanning both for Windows 10 and 11
antivirus antimalware scanner antitrojan antispyware antiransomware antihack scan scanners scan-tool defender defender-for-endpoint protecter protection python
4
mgijo / MDE
Defender for Endpoint Advanced Hunting Queries
defender-atp defender-for-endpoint kql kusto threat-hunting defender defenderatp
2
McL0vinn / MicrosoftDefender-DiscordCNC
Threat-Hunting KQL query which identifies machines that utilize powershell, cmd or wmic to connect to any URL that includes “cdn.discordapp.com” ,where the action was initiated by a script execution ( .vbs , .bat etc)
powershell threat-hunting cybersecurity defender-for-endpoint azure azure-sentinel kql kusto
1
McL0vinn / MicrosoftDefender-Egregor
Custom made Query which you can run in your Microsoft Defender - Advanced Hunting tool to look for network activity related to Egregor Ransomware.
microsoft defender-atp kusto defender-for-endpoint kql
0
mgijo
mgijo / mgijo
Config files for my GitHub profile.
defender-for-endpoint defender-atp azure security kql kusto threat-hunting
0
sip03ds / viofunction
Logic App with Azure Durable Functions
autopilot azure azure-functions azure-logic-apps azureactivedirectory defender-for-endpoint endpoint-manager
Language:Java 0
AlexLinov / IOC-Generator
IOC Generator for Microsoft Defender for Endpoints
defender-for-endpoint indicators-of-compromise
Language:Python
epomatti / azure-defender-for-cloud
Experimental infrastructure and concepts for Azure Defender for Cloud
azure azure-security defender defender-for-cloud defender-for-endpoint security-posture terraform antimalware antimalware-extention
Language:HCL
epomatti / azure-endpoint-security
Microsoft Endpoint reference resources
azure defender-for-endpoint entra entra-id intune laps terraform azure-security company-portal
Language:HCL