Focus on prompting and generating

An Obsidian plugin for displaying markdown notes as mind maps using Markmap.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers…

Microsoft Copilot for Security is a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale,…

MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.

Github Repository to hold samples for the MGGraph Powershell cmdlets

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

A collection of Microsoft Sentinel workbooks and analytics rules.

A collection of scripts to facilitate management of Microsoft Defender XDR products + Sentinel.

Sharing my KQL queries for Azure Sentinel

This repo holds Windows 365 related scripts for web RTC and other scripts to help the IT Pros with workflows.

This repository contains policy packs which can be used by system management software to configure device platforms (such as Windows 10 and iOS) in accordance with NCSC device security guidance. Th…

KQL Queries, Microsoft 365 Security

Defender for Endpoint

PowerShell script to encrypt a device's OS disk using the device serial as the PIN

A repository of sysmon configuration modules

CA Optics - Azure AD Conditional Access Gap Analyzer

Documentation and tools to access Windows Defender Application Control (WDAC) technology.

Robust and practical application control for Windows

An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

WAU daily updates apps as system and notify connected users. (Allowlist and Blocklist support)

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

Collection of Intune policies that could assist with implementing ACSC's Windows hardening guidance.

A C# utility for interacting with SCCM

This PowerShell module simplifies access to Microsoft Graph REST API resources and handles authentication, paging and throttling to the APIs.