WiLL75G / sentinel-soc-lab-setup Star 3 Code Issues Pull requests End-to-end Microsoft Sentinel SOC lab: KQL detections and threat hunts for SSH brute force (T1110) and malicious PowerShell (T1059.001). azure siem soc kql detection-engineering microsoft-sentinel kql-threathunting mittre-attack kql-microsoft-sentinel Updated Jul 29, 2026
cybersecurity-dev / awesome-Kusto-Query-Language Star 2 Code Issues Pull requests Awesome Kusto Query Language (KQL) awesome awesome-list awesome-lists kql kql-queries kql-microsoft-sentinel kql-siem Updated Aug 16, 2026
aayushthakur001 / SOC-Phishing-Investigation Sponsor Star 1 Code Issues Pull requests SOC Phishing Email Investigation & Automated Response using Microsoft Sentinel, KQL, MITRE ATT&CK and SOAR, N8N security playbook cybersecurity siem soc microsoft-azure blue-team microsof homelab-setup kql-microsoft-sentinel kql-siem Updated Aug 27, 2026
iamahmedsalam / azure-sentinel-soc-lab Star 1 Code Issues Pull requests Hybrid SIEM evaluation — Microsoft Sentinel + KQL, live-compared against an existing Wazuh SOC lab azure cybersecurity siem soc wazuh blue-team mitre-attack security-operations kql azure-sentinel detection-engineering microsoft-sentinel wazuh-rules cybersecurity-research cybersecurity-lab kql-queries kql-microsoft-sentinel mitre-attack-cloud-security microsoft-sentinel-workbook kql-siem Updated Sep 3, 2026
NjabuloShabalala / njabuloshabalala.github.io Star 1 Code Issues Pull requests Data Analyst microsoft python sql data-visualization cybersecurity data-analysis kql-microsoft-sentinel Updated Sep 8, 2026 HTML
Anuhyareddybaddam / Anuhyareddybaddam Star 0 Code Issues Pull requests Information Security Analyst kibana log-analysis event-correlation incident-response servicenow cloudsecurity malware-detection mitre-attack qradar zscaler query-tuning detection-engineering defender-for-endpoint crowdstrike-falcon cortex-xdr phishing-analysis sop-development true-positive kql-microsoft-sentinel Updated Jun 4, 2026
JoshM-CV / HITS-Microsoft-Threat-Hunting Star 0 Code Issues Pull requests Application of the HITS Threat Hunting Framework incorporating agentic AI for delivery across Sentinel, Defender and the wider Microsoft ecosystem microsoft threat-hunting threat-intelligence kql defender-for-endpoint kql-threathunting kql-microsoft-sentinel Updated Aug 3, 2026
Bolamabx / sentinel-cloud-detection-rules Star 0 Code Issues Pull requests Microsoft Sentinel KQL detection rules — MITRE ATT&CK for Cloud IaaS detection-engineering kql-microsoft-sentinel mitre-attack-cloud-security siem-azure-aws Updated May 7, 2026