Rod Trent

MustLearnKQL. Code included as part of the MustLearnKQL blog series

SentinelKQL. Azure Sentinel KQL

Sentinel-SOC-101. Content and collateral for the Microsoft Sentinel SOC 101 series

Security-Copilot. My personal work with Copilot for Security

OpenAISecurity. Scripts and Content for working with Open AI

JunkDrawer. Miscellaneous stuff I create

SentinelWorkbooks. Workbooks for Azure Sentinel

SentinelPlaybooks.

KQL-for-Everything. KQL example queries for working in Azure

SentinelPS. PowerShell

Azure-Sentinel-Cost-Troubleshooting-Kit. Guidance and collateral for troubleshooting and managing Azure Sentinel data costs.

KQLMysteries. The collateral repository for The KQL Mysteries series

OnPremSecMonitoring4Sentinel.

AzureSentinelMisc. Miscellaneous Azure Sentinel files that don't fall into other categories.

IncidentTasksRecipes. Microsoft Sentinel Incident Tasks Recipes

Sentinel-Queries. Collection of KQL queries

Prompt_Refiner. A web-based tool to create better prompts

MSIgnite-2023-Security-PreDay.

QuantumSecurity. Must Learn Quantum Security

Azure-Security-Center. Welcome to the Azure Security Center community repository

Hunting-Queries-Detection-Rules. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

DefenderKQL. KQL queries for Advanced Defender Hunting

SentinelRecipes. This repository provides guidance (or recipes) for handling investigations and hunting specific to exposed scenarios.

SOC_Score. Building the SOC Score for Azure Sentinel

GarminKQL. Data files and KQL for Fitness apps

Azure-Sentinel. Cloud-native SIEM for intelligent security analytics for your entire enterprise.

MustLearn. Main page to the Must Learn series

Copilot-For-Security-1. Microsoft Copilot for Security is a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale, while remaining compliant to responsible AI principles

logicapps. Azure Logic Apps labs, samples, and tools

SentinelWatchlists. Watchlists for Microsoft Sentinel

kql-treasure-hunt. Supporting Files for KQL Treasure Hunt

RodsAITourRepo. Demo Repo for the Microsoft AI Tour

SentinelAutomationModules. The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel

SecurityAdvocacy.

ThreatIntelligence. Threat Intelligence IOCs

Azure-Sentinel-Threat-Intelligence. Repository containing scripts to add IOCs of known attacks/vulnerabilities

KQLpublic. My useful KQL and Azure Monitor workbooks (Public)

KQL_Escape_Room. Datasets for the KQL Escape Room: Break Out with Your Query Skills blog post

Resource-Graph-KQL. KQL queries for use in Azure Resource Graph Explorer

Sentinel-Public.

OldLikeUs. This is the repository for the fiction book series: Old Like Us

WeatherData. This is the dataset for the KQL Art Gallery: Visualizing Data with Creative Queries blog post

KustoDetectiveAgency.

SilkRoadTrades. Dataset for the KQL Time Machine: Querying Historical Events to Learn Data Analysis blog post

KQLCookingShow. Datasets for the KQL Cooking Show: Recipes for Tasty Data Insights blog post

KQLBandTour. This is the GitHub Repo for the KQL Band Tour: Rocking the Data Stage blog post

KQL_Courtroom_Drama. The dataset for KQL Courtroom Drama: The Data Trial blog post

Survivor-Data-Island. This is the dataset for the KQL Reality Show: Survivor: Data Island blog post