Popular repositories Loading

1. threathunting-spl threathunting-spl Public

   Splunk code (SPL) for serious threat hunters and detection engineers.

   287 45

2. spl-to-kql spl-to-kql Public

   The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects requiring both technologies (Splunk and Azure/Sentinel) or …

   44 6

3. Hunting-Queries-Detection-Rules Hunting-Queries-Detection-Rules Public

   Forked from Bert-JanP/Hunting-Queries-Detection-Rules

   KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

   5

4. KQL-threat-hunting-queries KQL-threat-hunting-queries Public

   Forked from cyb3rmik3/KQL-threat-hunting-queries

   A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

   2

5. RemoteManagementMonitoringTools RemoteManagementMonitoringTools Public

   Forked from jischell-msft/RemoteManagementMonitoringTools

   Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

   PowerShell