Loading
Web App
Curated
KQL Search
A specialized search engine for discovering Kusto Query Language (KQL) queries. Features query discovery across Microsoft Sentinel, Defender, and Azure Data Explorer, along with a Query Assistant, Query Generator, Query Lab for testing, and Device Query functionality. Aggregates community-contributed hunting queries and detection rules for threat hunting, vulnerability management, and incident response.
Works with
Defender
You might also like
Web App
Sascha Stumpler
Device Control Policy Editor for macOS
Defender Device Control macOS Policy Manager is a browser-based editor for authoring and exporting Microsoft Defender for Endpoint device-control policies as Apple .mobileconfig profiles. It combines a Monaco JSON editor, visual Groups/Rules/Entries, a recursive query builder, live validation, and a policy simulator, plus import/export to standard .mobileconfig for deployment via Jamf, Intune, or any MDM.
Sascha StumplerWeb App
PIM Portal
Quick and Consistent PIM activation with bulk option
J
Jan Ketil SkankeWeb App
Roman Padrun
PIMBuddy
PIMBuddy helps you get a better overview about your PIM. It even let's you deploy PIM Policies and Groups within Seconds.
Roman PadrunPowerShell Module
Nathan Hutchinson
MDEValidator
A PowerShell module for validating Microsoft Defender for Endpoint configurations. Checks service status, real-time protection, cloud protection, ASR rules, network protection, tamper protection, SmartScreen policies, and MDE onboarding status with HTML and console reporting.
Nathan Hutchinson