microsoft-defender

There are 5 repositories under microsoft-defender topic.

XMuli / windows-defender-close
ToggleGuardian: Windows Defender Close. | 亦极简的电脑管家，一键关闭 Microsoft Defender Anti-Virus。
qt windows anti-virus windows-defender close microsoft-defender toggleguardian
Language:C++ 77
tomwechsler / Microsoft_Cloud_Security
Everything about Microsoft Cloud Security!
microsoft microsoft-security microsoft365 azure azure-security microsoft-defender
54
BenjiSec / AISW
Advanced Interactive Security Workshop
identity-protection microsoft-defender workshop mcas dlp
20
defender-asr-admx
MichaelGrafnetter / defender-asr-admx
Administrative Template (ADMX) for Microsoft Defender Attack Surface Reduction (ASR)
active-directory admx asr attack-surface-reduction gpo microsoft-defender
8
Ditectrev / Microsoft-SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals-Practice-Tests-Exams-QA
⛳️ PASS: Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) by learning based on our Questions & Answers (Q&A) Practice Tests Exams.
microsoft-security sc-900 active-directory azure-ad azure-bastion azure-defender-for-cloud azure-firewall azure-policies azure-policy azure-security azure-security-center microsoft-365 microsoft-365-security microsoft-cloud-app-security microsoft-compliance microsoft-defender certification practice-exams udemy-course community-project
7
Noble-Effeciency13 / ChanceOfSecurity
Collection of scripts and importable settings for the Microsoft Suite aligned with my blog
microsoft microsoft-azure microsoft-defender microsoft-entra microsoft-intune microsoft-purview
Language:PowerShell 7
deekayen / ansible-role-mde
Deploy Microsoft Defender Endpoint for Linux with Ansible
ansible-role microsoft-defender defender-atp linux
Language:Python 4
Rob-Strawley / Migrate2MDAV
Automated Migration from 3rd party AV to Microsoft Defender AV
microsoft-defender
4
francoisfried / Defender-Advanced-Hunting-Queries
KQL queries for Microsoft Defender Advanced Hunting organized around the TTPs of the MITRE ATT&CK framework.
advanced-hunting kql microsoft-defender mitre-attack threat-hunting
3
ImKKingshuk / WindowsNinja
WindowsNinja - Unleash the Power of Windows System Information Gathering! 🖥️🕵️✨ Harness the capabilities of WindowsNinja to silently gather detailed information about your Windows system. Analyze your system's defenses, expose configurations. 🕵️‍♂️💻 Dive into the depths of your Windows environment with WindowsNinja.
info-gathering microsoft-defender security-assessment security-tools system-info system-profiler windows windows-administration windows-environment windows-security windows12 system-exploration system-information-gathering windows-ninja windows-system-info-tool windowsninja
Language:PowerShell 3
hisashin0728 / UnhealthyStateRuleSentinel
This Repository provides detection rule when Recommendation of Microsoft Defender for Cloud state was changed to "Unhealthy".
azure microsoft microsoft-azure microsoft-defender
2
sherifrahim / Wazuh-SIEM-Defneder-Integrated
Setting Up Wazuh SIEM/XDR Homelab and Integration of Microsoft Defender into it.
cybersecurity defender-for-endpoint incident-response microsoft-defender siem soc-analyst wazuh wazuh-agent wazuh-integration wazuh-manager xdr
2
T13nn3s / microsoft
Microsoft related PowerShell scripts and KQL queries
microsoft microsoft-azure azure-sentinel microsoft-defender kql
Language:PowerShell 2
1kmt / mpcmdrun-restore
This tool is a batch file to restore all quarantined items from the "Quarantine" folder of Microsoft Defender.
batch batchfile defender microsoft-defender quarantine restore mpcmdrun
Language:Batchfile 1
ECCENTRIX-CA / Microsoft-Defender-for-Cloud-Apps
This article is about Microsoft Defender for Cloud Apps, exploring its functionalities and practical use cases to illuminate how it fortifies cloud security.
azure-security cloud-security microsoft-defender microsoft-security
1
epomatti / az-vm-jit
Azure Virtual Machine (VM) with Just-in-Time access
azure azure-security defender jit just-in-time microsoft-defender terraform pim privileged-access-management azure-pim vmaccess
Language:HCL 1
McL0vinn / MicrosoftDefender-Kaseya_IOCs
Simple KQL query that can be run either in MD for Endpoint (Threat hunting or Custom indicator) or in Azure Sentinel (Threat hunting or analytics rule).It's looking for 4 known IOCs related to the Kaseya attack
microsoft-defender azure azure-sentinel kaseya ransomware threat-hunting microsoft-defender-for-endopoint kql kusto
1
Tit4ns0ul / Microsoft-Security-Operations-Analyst
Microsoft Security Operations Analyst
microsoft-sentinel azure microsoft-365-defender microsoft-defender
1
0xZunia / Stardust
Stardust is a dashboard linked to Nmap, Jira, Microsoft Defender(partially) & Graph, made to monitor computers healthyness in C#/ASP.NET & BlazorServer.
asp-net blazor blazor-server csharp jira microsoft-azure microsoft-defender nmap security-audit
Language:HTML 0
AptAmoeba / Useful-SOC-KQL-Queries
A collection of custom KQL Queries that I've written or modified for 365 Defender's 'Advanced Threat Hunting.'
kql microsoft-defender microsoft-defender-for-endpoint
0
blackdevopss / prod-grade-azure
Technical DevOps recipes for a Production Grade Datacenter in Microsoft Azure
azure azure-policy azure-virtual-machine azure-virtual-networks design-patterns microsoft-defender
0
puppet_module_microsoft_defender_atp_agent
newcastleuniversity / puppet_module_microsoft_defender_atp_agent
Adapted from https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-install-with-puppet
microsoft defender microsoft-defender puppet puppet-module linux
Language:Ruby 0
sndnss / .github
Company Profile
assessment audit auditing automation cybersecurity firewall firewall-configuration firewall-management hardening microsoft microsoft-defender powershell scripts scripts-collection windows
0
Accelerynt-Security / AS-Block-Hash-in-Defender
Block File Hashes found in Microsoft Sentinel Incidents in Defender
incident-response microsoft-defender microsoft-sentinel sha256-hash
Accelerynt-Security / AS-Compromised-Machine-Tagging
Tag machines in Microsoft Defender from a Microsoft Sentinel Incident
microsoft-defender microsoft-sentinel
Accelerynt-Security / AS-Incident-Host-Exposure-Level
Add comments containing Microsoft Defender exposure level to Microsoft Sentinel incidents
microsoft-defender microsoft-sentinel
eigenein / mdatp-diagnostic-parser
Parser for Microsoft Defender real-time protection statistics
microsoft-defender rust-application
Language:Rust
jarocheng0123 / Windows-Destroyer
权限提升、自我复制、强制结束系统进程
bat microsoft-defender vbs windows
Language:VBScript

microsoft-defender

XMuli / windows-defender-close

tomwechsler / Microsoft_Cloud_Security

BenjiSec / AISW

MichaelGrafnetter / defender-asr-admx

Ditectrev / Microsoft-SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals-Practice-Tests-Exams-QA

Noble-Effeciency13 / ChanceOfSecurity

deekayen / ansible-role-mde

Rob-Strawley / Migrate2MDAV

francoisfried / Defender-Advanced-Hunting-Queries

ImKKingshuk / WindowsNinja

hisashin0728 / UnhealthyStateRuleSentinel

sherifrahim / Wazuh-SIEM-Defneder-Integrated

T13nn3s / microsoft

1kmt / mpcmdrun-restore

ECCENTRIX-CA / Microsoft-Defender-for-Cloud-Apps

epomatti / az-vm-jit

McL0vinn / MicrosoftDefender-Kaseya_IOCs

Tit4ns0ul / Microsoft-Security-Operations-Analyst

0xZunia / Stardust

AptAmoeba / Useful-SOC-KQL-Queries

blackdevopss / prod-grade-azure

newcastleuniversity / puppet_module_microsoft_defender_atp_agent

sndnss / .github

Accelerynt-Security / AS-Block-Hash-in-Defender

Accelerynt-Security / AS-Compromised-Machine-Tagging

Accelerynt-Security / AS-Incident-Host-Exposure-Level

eigenein / mdatp-diagnostic-parser

jarocheng0123 / Windows-Destroyer