Popular repositories Loading

1. Sentinel-Queries Sentinel-Queries Public

   Collection of KQL queries

   1.6k 381

2. awesome-kql-sentinel awesome-kql-sentinel Public

   A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

   240 58

3. kql-for-dfir kql-for-dfir Public

   A guide to using Azure Data Explorer and KQL for DFIR

   124 28

4. 4688-sysmon 4688-sysmon Public

   61 4

5. mddrguidance mddrguidance Public

   Links and guidance related to the return on mitigation report in the Microsoft Digital Defense Report

   29 2

6. Azure-Sentinel Azure-Sentinel Public

   Forked from Azure/Azure-Sentinel

   Cloud-native SIEM for intelligent security analytics for your entire enterprise.

   Jupyter Notebook 22 2