microsoft-sentinel topic

Microsoft Sentinel SOC Operations

eshlomo1

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

Cyb3r-Monk

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

ep3p

The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel

briandelmsft

Ian Hanley's deceptively simple KQL queries.

EEN421

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

cyb3rmik3

A collection of various SIEM rules relating to malware family groups.

reversinglabs

Misc. content for Microsoft Sentinel

h0ffayyy