Skip to content
#

microsoft-security

Star

Here are 32 public repositories matching this topic...

Language: All
Filter by language
All 32 PowerShell 4 Python 4 HTML 2 C# 1 CSS 1 Go 1 TypeScript 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

cyb3rmik3 / KQL-threat-hunting-queries

Star 768

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

microsoft security sentinel threat-hunting threat-detection securitycenter kusto kql threat-hunt microsoft-365 kusto-query-language microsoft-security microsoft-sentinel kusto-query microsoft-365-security microsoft-365-defender threat-detecting microsoft-xdr microsoftxdr
  • Updated Aug 28, 2025

Ditectrev / Microsoft-SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals-Practice-Tests-Exams-QA

Star 20

⛳️ PASS: Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) by learning based on our Questions & Answers (Q&A) Practice Tests Exams.

active-directory certification community-project azure-ad azure-security azure-policy azure-security-center udemy-course practice-exams azure-firewall microsoft-365 microsoft-cloud-app-security azure-policies azure-bastion microsoft-defender microsoft-security microsoft-compliance azure-defender-for-cloud sc-900 microsoft-365-security
  • Updated Oct 25, 2025

BenjaminIheukumere / april26_ad_check0r

Star 6

AD April ’26 Check0r is a read-only PowerShell tool to assess on-prem AD for the April 2026 Kerberos RC4→AES change. It inventories SPN accounts, flags risky msDS-SupportedEncryptionTypes/KDC overrides, and collects DC System readiness events (201–209) to predict breakage and guide fixes.

aes powershell active-directory rc4 cybersecurity kerberos security-hardening it-security kdc read-only blue-team windows-security security-assessment microsoft-security ad-security kerberos-hardening
  • Updated Mar 19, 2026
  • PowerShell

servtep / MCADDF

Star 3

MCADDF - A holistic operational framework bridging the gap between on-prem Active Directory and Cloud-native (Entra ID/Azure) security. This repository provides a structured library of verified attack vectors and detection logic, organized via the SERVTEP ID system and mapped to the current MITRE ATT&CK landscape. Curated by Pchelnikau Artur.

azure active-directory onedrive exchange sharepoint hardening sharepoint-online red-team zero-trust exchange-online blue-team mitre-attack m365 purple-team tiering microsoft-security cybersecurity-framework kill-chain entra-id mcaddf
  • Updated Mar 2, 2026

Improve this page

Add a description, image, and links to the microsoft-security topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the microsoft-security topic, visit your repo's landing page and select "manage topics."

Learn more