edoardogerosa/sentinel-attack

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

↗ Open on GitHub

Stars

1,077

Forks

201

Language

—

License

MIT

Last push

2 years ago

cybersecurity siem logging security-tools azure detection mitre-attack threat-hunting blue-team workbooks sysmon kql azure-sentinel sysmon-config terraform-azure

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.