Cyb3r-Monk/DefensiveSysmon

Stars
2
Language
PowerShell
Created over 4 years ago
Updated over 4 years ago

Cyb3r-Monk/DefensiveSysmon

Cyb3r-Monk

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository for Defensive applications of Windows Sysmon

Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

Jupyter Notebook

RITA-J

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

Jupyter Notebook

ACCD

Active C&C Detector

Jupyter Notebook

Cheat-Sheets

Cheat sheets for threat hunting, detection and other stuff.

azure-kql

Azure KQL (Kusto Query Language) tips, tricks and best practices for Threat Hunting, Blue Teaming, etc.

Cyb3rMonk