sgordon510

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

DCSecurityOperations

A collection of Microsoft Sentinel workbooks and analytics rules.

DeepBlueCLI

IntroLabs

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

MustLearnKQL

Code included as part of the MustLearnKQL blog series

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

PSHTML-AD-Report

Create a high level interactive HTML report for you Active Directory environment using PowerShell

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sentinel-attack

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

Sentinel-Queries

Collection of KQL queries

sgordon510/Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

sgordon510/DCSecurityOperations

A collection of Microsoft Sentinel workbooks and analytics rules.

sgordon510/DeepBlueCLI

sgordon510/IntroLabs

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

sgordon510/MustLearnKQL

Code included as part of the MustLearnKQL blog series

sgordon510/mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

sgordon510/PSHTML-AD-Report

Create a high level interactive HTML report for you Active Directory environment using PowerShell

sgordon510/SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sgordon510/sentinel-attack

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

sgordon510/Sentinel-Queries

Collection of KQL queries

sgordon510/SentinelKQL

Azure Sentinel KQL

sgordon510/SysmonCommunityGuide

TrustedSec Sysinternals Sysmon Community Guide