mondogenerate Goto Github PK

autoupdate

awesome-kql-sentinel

A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

azure-ad-incident-response-powershell-module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

dfir

DFIR Tools and Workflow

exela-v2.0

Exela Stealer runtime and scantime undetectable,running asynchronous, fud & asynchronous stealer, async stealer password,cookie,autofil,session stealer (instagram, twitter, tiktok,twitch,spotify,riotgames, reddit, roblox, steam session stealer) token stealer, wifi stealer

gpt4all

gpt4all: an ecosystem of open-source chatbots trained on a massive collections of clean assistant data including code, stories and dialogue

hunting-queries-detection-rules

KQL Detections for Microsoft Sentinel and Microsoft 365 Defender

hunting-queries-zerodays

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

liveresponse

M365 MDATP Live Response sample scripts

llama.cpp

Port of Facebook's LLaMA model in C/C++

maliciousclickoncegenerator

Quick Malicious ClickOnceGenerator for Red Team

mdatp

Microsoft 365 Defender - Resource Hub

mdatp_posh_scripts

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

privategpt

Interact privately with your documents using the power of GPT, 100% privately, no data leaks

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

scriptladdy

sentinel-queries

Collection of KQL queries

sharpml

Machine Learning Network Share Password Hunting Toolkit

sysmon

Sysmon configs

threat-hunting-and-detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

vision-procmon

A ProcessMonitor visualization application written in rust.