Pinned Loading

1. Observe Observe Public

   Observe introduction: building a SIEM with Observe.

2. TTmapping TTmapping Public

   Mapping common adversarial TTP's against Detections & Atomics.

3. ADFS-Enum ADFS-Enum Public

   ADFS service provider (relying party) information enumerator

   PowerShell

4. KQL KQL Public

   KQL detection query collection.

5. xql-generator xql-generator Public

   XQL query generator, for generating quick Hunting queries. Cortex XDR focussed. A github pages project.

   4

6. kql-generator kql-generator Public

   KQL generator, for generating quick Hunting queries. Microsoft 365 Defender focussed.

   1