MDATP. MDATP
454Hunting-Queries-Detection-Rules. KQL Queries. Microsoft Defender, Microsoft Sentinel
206PSMDATP. PowerShell Module for managing Microsoft Defender Advanced Threat Protection
76IntuneCustomCompliance. Microsoft Intune Custom Compliance
42posh. Alex Verboon PowerShell Code
40WindowsDefenderATP-Hunting-Queries. Sample queries for Advanced hunting in Microsoft Defender ATP
38DefenderResourceHub. Defender Resource Hub
32PowerShellCode. PowerShell stuff I work on
18SentinelTIUploadToolkit. Sentinel Threat Intelligence Upload Toolkit
18Entra-PIM-Helpers. Microsoft Entra Privileged Identity Management scripts
10Azure-Threat-Research-Matrix-KQL. Azure Threat Research Matrix - KQL
6PSMD. PowerShell module for Microsoft 365 Defender
5PSURLhaus. PowerShell Module to retrieve data from URLhaus database
4Defender-for-Cloud-Apps-Toolbox. Defender for Cloud Apps - Toolbox
4microsoft-defender-threat-intelligence-toolkit. Scripts for managing Microsoft Sentinel Threat Intelligence
4MCASToolbox. PowerShell scripts for managing Microsoft Cloud App Security
3SessionPresentations. My Session presentations
3TechNetScriptGallery. Scripts that I shared on the TechNet Script Gallery
3MCAS. Powershell module for Microsoft Cloud App Security
3GroupPolicyXtended. PowerShell Module for Windows Group Policy Management
2AADSTSErrorInfo. Look up AADTS error codes
2DefenderMAPS. Verify Windows Defender MAPS Connectivity
2KustoVars. Kusto (KQL) variable generator
2EdgeScarewareBlockerDemo. Edge Scareware blocker demo
2AzureAutomation. AzureAutomation
1HTTP-Connectivity-Tester. Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
1PESecurity. PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
1windows-itpro-docs. This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.
1PowerShell. PowerShell scripts and functions
1PowerShell-for-Pentesters. PowerShell for Pentesters
1GroupPolicypreferencesReporter. Group Policy preferences Reporter
1