microsoft-defender

🛡️ Security & Privacy Hardening Tool for Windows 11 26H2 — 630+ Settings, 7 Modules, BAVR Pattern.

ToggleGuardian: Windows Defender Close. | 亦极简的电脑管家，一键关闭 Microsoft Defender Anti-Virus。

Everything about Microsoft Cloud Security!

M365 PowerShell scripts for Microsoft 365 administration: Intune, Entra ID, Defender, Exchange Online, Purview, Teams, SharePoint and tenant management. Microsoft Graph and modern modules only, read-only by default, -WhatIf on every change, full comment-based help.

KQL queries for Microsoft Defender Advanced Hunting organized around the TTPs of the MITRE ATT&CK framework.

A comprehensive script to completely disable Microsoft Defender, Windows Security app, SmartScreen, handling all aspects - group policies, registry tweaks, services, drivers, tasks, events, shell extensions, registered libraries - reliable and reversible.

⛳️ PASS: Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) by learning based on our Questions & Answers (Q&A) Practice Tests Exams.

The self-hosted KQL query management platform for SOC teams

Security baseline for managing Linux devices with Microsoft Intune — Ubuntu autoinstall enrollment, custom compliance policies, and hardening scripts for Defender, firewall, encryption and updates.

PowerShell tool for streamlined Microsoft Defender Advanced Hunting query management with GitHub Copilot integration

Advanced Interactive Security Workshop

Administrative Template (ADMX) for Microsoft Defender Attack Surface Reduction (ASR)

Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response

Collection of scripts and importable settings for the Microsoft Suite aligned with my blog

Temporarily disable and restore Microsoft Defender for Windows lab work, with dry run, live status, scheduled re-enable, audit manifests, and firewall integrity checks.

A modular AI-powered CLI for Azure Sentinel threat hunting & remediation. Features strict guardrails, cost-aware routing, and automated SOAR workflows (VM isolation, rule creation).

AI-powered SOC analyst for Azure Sentinel threat hunting with GPT and VirusTotal integration.

Microsoft Defender XDR KQL detections for RedSun, BlueHammer, UnDefend, and CVE-2026-33825-related Defender abuse behaviors.

Windows Defender Disable Tool - disable windows defender, windows defender disable, how to disable windows defender, windows 11 permanently, tamper protection, powershell, windows defender remover, windows defender off, portable github. Download:🡇

KQL playbook for Microsoft Defender focused on real-world threat hunting, behavioral analysis, and investigation workflows.