cyb3rmik3
Follow
-
-
KQL-threat-hunting-queries Public
A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
-
presentations Public
A repository for notes and references of presentations.
-
awesome-detection-engineer Public
Forked from st0pp3r/awesome-detection-engineerOnline resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools, logging configuration and best practices, event log refere…
-
Open-Source-Threat-Intel-Feeds Public
Forked from Bert-JanP/Open-Source-Threat-Intel-FeedsThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
-
MDE-DFIR-Resources Public
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
-
Hunting-Queries-Detection-Rules Public
Forked from Bert-JanP/Hunting-Queries-Detection-RulesKQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
-
misp2sentinel Public
Forked from cudeso/misp2sentinelMISP to Sentinel integration
Python MIT License UpdatedNov 25, 2024 -
Hunting-Lists Public
A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.
-
-
-
TheBarn Public
A description of DFIR lab setup through experience/notes/courses
2 UpdatedJan 29, 2024 -
DFIR-Notes Public
Cheat sheet on memory forensics using various tools such as volatility.
-
bsidesath2021 Public
References used to prepare and deliver presentation "Cyber resilience: Awareness is not enough" at Security BSides Athens 2021.
-
PGPKey Public
Interested in sending something confidential? You may drop me a line at michalis -at- michalos.net using this PGP key or encrypt any file and forward it.
-
MaltegoCE Public
Notes and comments regarding Maltego CE (community edition) and relevant available transformations for free.