A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious behavior

Everything about Microsoft Cloud Security!

A PowerShell script to audit privileged users in Microsoft Entra ID and Azure with detailed reporting

All about Microsoft 365 Enterprise Mobility + Security (EMS)

An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bicep) with PowerShell automation to streamline the deployment of Sentinel solutions, analytics rules, and workbooks.

⛳️ PASS: Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) by learning based on our Questions & Answers (Q&A) Practice Tests Exams.

A set of Power Automate flows that fetch the latest Microsoft Security News from various sources directly into your Teams chat or channels.

All you need to prepare for the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam!

🪟🍭🖥️ A concise summary of Microsoft's products includes Azure, .NET, M365, Power Platform, Security, DevOps, Viva, and GitHub. The curricula are based on the Build 2023 challenge.

✨ A linting tool for working with Microsoft Sentinel & Defender Advanced Hunting KQL

kql and indicators-of-compromise sharing repository

This repository contains all the presentations, demo's, videos and other resources that we use during our community events.

This article is about Microsoft Defender for Cloud Apps, exploring its functionalities and practical use cases to illuminate how it fortifies cloud security.

KQL-Queries 🐙 provides ready KQL scripts for Microsoft Defender XDR threat hunting, helping security teams detect, investigate, and respond to threats.

Lazy Microsoft Security

This repository hosts specific UI's that can be used to visualize Global Secure Access policies. It tries to give a visual presentation of the policies in a way like traditional network vendors do.