FalconFriday vs Sentinel-Queries

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

FalconFriday		Sentinel-Queries
	Project
3	Mentions	17
653	Stars	1,294
1.5%	Growth	-
3.2	Activity	7.4
about 1 month ago	Latest Commit	about 1 month ago
	Language
BSD 3-clause "New" or "Revised" License	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

FalconFriday

Posts with mentions or reviews of FalconFriday. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-06.

Collection of Queries
5 projects | /r/crowdstrike | 6 Jun 2023

Falcon Force Team - Falcon Friday Queries: https://github.com/FalconForceTeam/FalconFriday
MS Sentinel Analytics & KQL
4 projects | /r/AskNetsec | 11 Dec 2022
Analytical rules
3 projects | /r/AzureSentinel | 22 Nov 2022

Sentinel-Queries

Posts with mentions or reviews of Sentinel-Queries. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-12-11.

Custom Detections
1 project | /r/DefenderATP | 25 Aug 2023

Matt Zorich has a good list of detections for both M365D and Sentinel - https://github.com/reprise99/Sentinel-Queries
What were your "HOLY SH*T IT'S REALLY THAT SIMPLE?!" moments when working through issues and finding a solution? Share so that others may learn.
1 project | /r/sysadmin | 5 Jun 2023

Here's a massive list of pre-built queries to get you started: GitHub - reprise99/Sentinel-Queries: Collection of KQL queries
MS Sentinel Analytics & KQL
4 projects | /r/AskNetsec | 11 Dec 2022
Analytical rules
3 projects | /r/AzureSentinel | 22 Nov 2022
Useful Collection of KQL queries
1 project | /r/AzureSecurity | 29 Aug 2022
BARK Detections: These KQL queries are designed to find use of the abuses in the BloodHound BARK toolkit in your Azure AD tenant. These queries are not designed to detect the use of BARK itself, just the behaviour that BARK simulates.
1 project | /r/blueteamsec | 20 Aug 2022
What are best best advanced hunting queries you use in 365 defender?
1 project | /r/AZURE | 19 Jul 2022

https://github.com/reprise99/Sentinel-Queries has a number
Must have analytic rules
3 projects | /r/AzureSentinel | 15 Jun 2022
Sentinel KQL Query: Create a pivot table showing all conditional access policy outcomes over the last 30 days
1 project | /r/blueteamsec | 18 Apr 2022
Sentinel KQL Query: Summarize outbound (your users connecting to other tenants) activity by listing the users and which applications they are accessing in each remote tenant
1 project | /r/blueteamsec | 18 Apr 2022

What are some alternatives?

When comparing FalconFriday and Sentinel-Queries you can also consider the following projects:

chatgpt-raycast - ChatGPT raycast extension

csfalcon - crowdstrike tips & tricks 🦅 😶‍🌫️

Hunting-Queries-Detection-Rules - KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

crowdstrike-falcon-queries - A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

Microsoft-365-Defender-Hunting-Queries - Sample queries for Advanced hunting in Microsoft 365 Defender

falcon-query-assets - Welcome to the Falcon Query Assets GitHub page.

awesome-kql-sentinel - A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

CrowdStrike-Queries - CrowdStrike Falcon Queries For Advanced Threat Detection

WindowsDefenderATP-Hunting-Queries - Sample queries for Advanced hunting in Microsoft Defender ATP