Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're diving into offensive strategies, mastering threat hunting, or bolstering your blue-team defenses, this repo has you covered.
Note: This repository is under development. Queries (KQL), scripts, pages, links, and resources are continuously added and updated. Please check back soon for more information and updates.
Packed with an extensive array of resources, tools, and insights, this toolkit includes:
- 🔍 Kusto Queries
- 🛠️ PowerShell Script & Commands
- 🐍 Python Scripts
- 🏗️ Architecture Diagrams
- 📝 AI Security Hacking and Tips
- 📊 Data Analysis & Visualization
- 🌐 Links to Top External Repos and Sites
- 📚 And So Much More!
Every piece of content here is battle-tested, drawn from real-world incident responses (IR), cloud penetration tests (PT), security assessments, and more. This is practical knowledge, not just theory!
In addition to the core resources, this repo features tools and scripts specifically designed for:
- 🛡️ Microsoft Sentinel
- 🔐 Microsoft Defender XDR
- 🆔 Entra ID
- 🔍 Azure Security
- 🔒 Multi-Cloud Security (Microsoft 365, Azure, AWS, GCP, GWS)
- 🌟 And other essential cloud security tools
Stay secure and happy exploring! 🌐🔐
Note: This Hub replaces the Microsoft-Sentinel-SecOps repo. The content from the Microsoft-Sentinel-SecOps repo is being migrated to this new repository.