Popular repositories Loading

1. Sentinel-Queries Sentinel-Queries Public

   Collection of KQL queries

   1.4k 343

2. awesome-kql-sentinel awesome-kql-sentinel Public

   A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

   214 53

3. kql-for-dfir kql-for-dfir Public

   A guide to using Azure Data Explorer and KQL for DFIR

   97 22

4. 4688-sysmon 4688-sysmon Public

   49 3

5. mddrguidance mddrguidance Public

   Links and guidance related to the return on mitigation report in the Microsoft Digital Defense Report

   27 1

6. Azure-Sentinel Azure-Sentinel Public

   Forked from Azure/Azure-Sentinel

   Cloud-native SIEM for intelligent security analytics for your entire enterprise.

   Jupyter Notebook 20 2