Add-on to onboard telemetry data via Microsoft Defender ATP hunting API in Splunk (ES)
-
Updated
Dec 28, 2019 - Python
Add-on to onboard telemetry data via Microsoft Defender ATP hunting API in Splunk (ES)
Custom made Query which you can run in your Microsoft Defender - Advanced Hunting tool to look for network activity related to Egregor Ransomware.
Defender for Endpoint Advanced Hunting Queries
Config files for my GitHub profile.
A PowerShell module to interact with Microsoft's Defender for Endpoint API.
Use KQG and generate Kusto scripts | Used with Defender ATP
Deploy Microsoft Defender Endpoint for Linux with Ansible
PowerShell for Threat Management Explorer
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant
Hunting Queries for Defender ATP
Hunting queries and detections
Add a description, image, and links to the defender-atp topic page so that developers can more easily learn about it.
To associate your repository with the defender-atp topic, visit your repo's landing page and select "manage topics."