Popular repositories

1. Sentinel-Queries Sentinel-Queries Public

   Collection of KQL queries

   1.3k 312

2. awesome-kql-sentinel awesome-kql-sentinel Public

   A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

   193 51

3. kql-for-dfir kql-for-dfir Public

   A guide to using Azure Data Explorer and KQL for DFIR

   87 19

4. 4688-sysmon 4688-sysmon Public

   47 2

5. mddrguidance mddrguidance Public

   Links and guidance related to the return on mitigation report in the Microsoft Digital Defense Report

   26 1

6. Azure-Sentinel Azure-Sentinel Public

   Forked from Azure/Azure-Sentinel

   Cloud-native SIEM for intelligent security analytics for your entire enterprise.

   Jupyter Notebook 20 2