defenderxdr 开源项目推荐（10 个）

SlimKQL /Hunting-Queries-Detection-Rules

KQL 查询。Microsoft Defender、Microsoft Sentinel。

alexverboon /Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

SlimKQL /Detections.AI

A mirror image of my detection rules

vladjoh /EasyDefenderMacOS

A set of importable Intune policies that simplify onboarding/offboarding MacOS devices to/from Defender for Business/Endpoint.

Aamir-Muhammad /KQL-Queries

Microsoft Defender XDR threat hunting KQL queries

dferrell30 /MDE-Endpoint-Security-Policy-Deployment-Toolkit

JSON-driven Microsoft Defender for Endpoint policy deployment toolkit focused on repeatable endpoint hardening, validation, and deployment consistency using Microsoft Graph.

jaraguayo /KQL-Queries

KQL-Queries 🐙 provides ready KQL scripts for Microsoft Defender XDR threat hunting, helping security teams detect, investigate, and respond to threats.

Hylje5000 /awesome-defender-knickknacks

Useful Defender XDR things I build in my day-to-day :)

0fflineDocs /KQL-Library

Searchable library of KQL queries for Microsoft security products, with category browsing and one-click copy.

AndyBallardSecurity /KQL-Queries-Defender-Sentinel

KQL Queries for Microsoft Sentinel and Microsoft Defender XDR