Azure-Sentinel-Notebooks
ThreatHunter-Playbook
Our great sponsors
Azure-Sentinel-Notebooks | ThreatHunter-Playbook | |
---|---|---|
4 | 4 | |
524 | 3,866 | |
2.3% | 2.1% | |
6.9 | 0.0 | |
5 months ago | 2 months ago | |
Jupyter Notebook | Python | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Azure-Sentinel-Notebooks
- Microsoft Sentinel Notebooks - Use Cases
-
Jupyter Notebooks?
MS Sentinel heavily relies on Jupyter notebooks for advanced threat hunting - definitely worth checking out: https://github.com/Azure/Azure-Sentinel-Notebooks
-
MSP SIEM Solution
Projects to look into: https://github.com/Azure/Azure-Sentinel https://github.com/Azure/Azure-Sentinel-Notebooks
- Azure Sentinel Query Creator Notebook
ThreatHunter-Playbook
- Threat hunting Playbooks
-
SOC Analyst Training
How fast is Jupyter in comparison? I’ve never seen it used for hunting, but apparently it’s pretty big and supported for it: https://github.com/OTRF/ThreatHunter-Playbook
- Jupyter Notebooks?
-
Cybersecurity Repositories
ThreatHunter-Playbook
What are some alternatives?
Azure-Sentinel - Cloud-native SIEM for intelligent security analytics for your entire enterprise.
MonsterHunterPortable3rdHDRemake - Personal fork of a texture upscaling project for PSP's Monster Hunter Portable 3rd
HELK - The Hunting ELK
whids - Open Source EDR for Windows
APTnotes - Various public documents, whitepapers and articles about APT campaigns
awesome-appsec - A curated list of resources for learning about application security
awesome-incident-response - A curated list of tools for incident response
awesome-ctf - A curated list of CTF frameworks, libraries, resources and softwares
awesome-pentest - A collection of awesome penetration testing resources, tools and other shiny things
free-programming-books - :books: Freely available programming books
awesome-honeypots - an awesome list of honeypot resources
Infosec_Reference - An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.