Pinned Repositories
awesome-kql-sentinel
A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel
Azure-Sentinel-4-SecOps
Azure Sentinel 4 SecOps
DCSecurityOperations
A collection of Microsoft Sentinel workbooks and analytics rules.
FalconFriday
Bi-weekly hunting queries
MDR-PKG
sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
Sentinel-Queries
Collection of KQL queries
sysmon-config
Sysmon configuration file template with default high-quality event tracing
Threat-Hunting-and-Detection
Repository for threat hunting and detection queries, tools, etc.
stayingahead's Repositories
stayingahead/awesome-kql-sentinel
A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel
stayingahead/Azure-Sentinel-4-SecOps
Azure Sentinel 4 SecOps
stayingahead/DCSecurityOperations
A collection of Microsoft Sentinel workbooks and analytics rules.
stayingahead/FalconFriday
Bi-weekly hunting queries
stayingahead/MDR-PKG
stayingahead/sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
stayingahead/Sentinel-Queries
Collection of KQL queries
stayingahead/sysmon-config
Sysmon configuration file template with default high-quality event tracing
stayingahead/Threat-Hunting-and-Detection
Repository for threat hunting and detection queries, tools, etc.