DefensiveOrigins/SentinelKQL DefensiveOrigins/SentinelKQL

  • Stars
    star
    7
  • Rank 2,294,772 (Top 46 %)
  • Language
  • Created over 2 years ago
  • Updated over 2 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
DefensiveOrigins/SentinelKQL
github

DefensiveOrigins

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Some supporting KQL queries for a blog

More Repositories

1

APT06202001

Applied Purple Teaming - (ITOCI4hr) - Infrastructure, Threat Optics, and Continuous Improvement - June 6, 2020
HTML
318
star
2

AtomicPurpleTeam

Atomic Purple Team Framework and Lifecycle
278
star
3

APT-Lab-Terraform

Purple Teaming Attack & Hunt Lab - Terraform
HCL
157
star
4

ps-whitenoiseweb

Powershell - web traffic whitenoise generator
PowerShell
46
star
5

DO-LAB

HTML
42
star
6

Training

Defensive Origins Training Schedule
35
star
7

DomainBuildScripts

Build a domain with three quick PowerShell scripts!
PowerShell
28
star
8

APTv4_Defcon28

Defcon 28 - Red Team Village - Applied Purple Teaming - Why Can't We Be Friends
20
star
9

AutoSPFRecon

Automatic Sender Policy Framework Reconnaissance
Shell
18
star
10

APT-Lab-FastOpticsSetup

Scripts to threat optics stack quickly / abbreviated and automated. Run after APT-Lab-Terraform
PowerShell
12
star
11

APT-PreReqs

Applied Purple Teaming Course Pre-Requisites
10
star
12

LABPACK

Various components we use in labs
Roff
9
star
13

OpticsBuilder

Install Threat Optics
PowerShell
4
star
14

Detect-msDS-KeyCredentialLink

Detect msDS-KeyCredentialLink Changes
4
star
15

MSSentinelSysmonParser

A simple parser for Sysmon logs through EID28 for Microsoft Sentinel
3
star
16

dolib-images

Repo for Defensive Origins images for markdown, etc.
1
star
17

DET062021

PowerShell
1
star
18

APT22Things

Location for a few things necessary for APT22
1
star
19

APT-Lab-Terraform-Linux

1
star
20

ADD-PreReqs

Attack Detect Defend Course Pre-Requisites
1
star