Popular repositories Loading

1. Defender-KQL-Playbook Defender-KQL-Playbook Public

   KQL playbook for Microsoft Defender focused on real-world threat hunting, behavioral analysis, and investigation workflows.

   9

2. MDE-Test-Framework MDE-Test-Framework Public

   This is a scripting tool designed to run tests against enrolled Defender for Endpoint workstations via playbook.

   PowerShell 7 2

3. ShadowTraceOps-CommunityEdition ShadowTraceOps-CommunityEdition Public

   PowerShell-based Microsoft security investigation and defensive gap assessment framework focused on Microsoft XDR, Entra ID, KQL pivots, analyst workflow, and executive exposure reporting.

   PowerShell 4

4. MDE-Endpoint-Security-Policy-Deployment-Toolkit MDE-Endpoint-Security-Policy-Deployment-Toolkit Public

   JSON-driven Microsoft Defender for Endpoint policy deployment toolkit focused on repeatable endpoint hardening, validation, and deployment consistency using Microsoft Graph.

   PowerShell 3 1

5. MDO365-Deployment-Tool MDO365-Deployment-Tool Public

   A Windows PowerShell deployment tool for configuring a Zero Trust baseline in Microsoft Defender for Office 365, with JSON-driven configuration, policy status indicators, test mode, validation, and…

   PowerShell 2

6. entra-phish-resistant-mfa entra-phish-resistant-mfa Public

   Phishing-resistant MFA deployment playbook for Microsoft Entra ID using YubiKeys, Conditional Access, and recovery controls.

   PowerShell