sentinel-attack
by netevert
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
AI summary
Threat hunter
A tool to quickly deploy a threat hunting capability on Azure Sentinel using Sysmon and MITRE ATT&CK
- stars
- 1.1K
- forks
- 209
- watching
- 72
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Threat Hunting Platform
A collection of tools and resources for threat hunters to identify and respond to cyber threats.
Threat simulator
A PowerShell repository to simulate and train threat hunting skills without malicious files.
Threat hunter
An aggregator tool for querying multiple services to gather threat intelligence data.
Threat hunter
A platform for searching and analyzing publicly available online data to detect potential security threats
IoT threat hunter
A tool for hunting and tracking Internet of Things (IoT) security threats by collecting and analyzing indicators of compromise (IOCs)
Threat hunting tools
Collection of resources and concepts for threat hunting and detection engineering.
Malware toolkit
A collection of threat intelligence resources and tools for analyzing APT malware
Domain scanner
Tools and rules for detecting malicious domain calls in endpoint malware
Threat detector
A PowerShell module designed to detect potential security threats in Azure AD environments
Threat Hunter
Automated platform for discovering and analyzing cybersecurity threats targeting an organization
Threat Hunter
A community-driven project providing shared detection logic and resources for threat hunting
Threat detection resource
An informational repository providing resources and knowledge for detecting adversaries in IT environments.
Adversary hunter
Detects and mitigates advanced threat tradecraft by analyzing system events and behavior patterns
Threat Hunting App
A Splunk application designed to guide threat hunts by mapping investigations to the MITRE ATT&CK framework
Endpoint Scanner
A Powershell Threat Hunting Module designed to scan and survey remote endpoints for indicators of compromise or comprehensive system information.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions sentinel-attack.
