SCStelz/security-investigator

Microsoft Security Copilot is a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale, while remaining compliant to responsible AI principles

Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

MCP to help Defenders Detection Engineer Harder and Smarter

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

KQL Queries. Microsoft Defender, Microsoft Sentinel

A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.