PowerShell module for Azure Sentinel

The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel

Solution to deploy a Sentinel playground demo environment

Development of new Microsoft Sentinel module

Microsoft Sentinel script to extract all Content Hub items for a particular data table

Implemented a miniature HoneyNet on Azure, integrating log sources from diverse resources into a Log Analytics workspace.

Set up Azure Sentinel (SIEM) to actively monitor a virtual machine honeypot, capturing live RDP Brute Force attack data from global sources. This project leverages a custom PowerShell script to fetch the geo-location of attackers and dynamically plots them on the Azure Sentinel Map for real-time threat visualization.

Defender Resource Hub

Sentinel custom watchlist import solution which can be used to work around the watchlist file size limitation of 3.8 MB.

Scripts to help you get started with your DevOps Repo and Microsoft Sentinel

Managing Microsoft Sentinel with Azure Lighthouse