KQL Queries. Microsoft Defender, Microsoft Sentinel
MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.
Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.
Shadow Throne is the command center for the Shadow Suite, providing a unified operational dashboard to launch, manage, and monitor Microsoft Defender deployment, validation, investigation, and governance tools.
Parse Ransomwatch results in python and create MDE IOC lists as you search
This template provides to write tag as Azure subscription name for Azure VM installed Defender for Servers (MDE)
Usefull tools, scripts and queries for MS Defender for Endpoint
To associate your repository with the defenderforendpoint topic, visit your repo's landing page and select "manage topics."