Azure/Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
Ranks #450 of 3,103 repositories GStars tracks this week (top 15%).
The project lists 348 contributors on GitHub.
Gained 27% fewer stars in the last 90 days than in the 90 days before.
Use Cases & Benefits
- Provides cloud-native SIEM capabilities for intelligent security analytics across enterprise environments.
- Offers out-of-the-box detections, hunting queries, workbooks, and playbooks to accelerate threat detection and response.
- Use for integrating Microsoft Sentinel and Microsoft 365 Defender to unify security monitoring and advanced threat hunting.
- Use for customizing and contributing security detection rules and automation playbooks via GitHub collaboration.
- Use for validating and testing KQL queries and detection schema locally before deploying security content.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
MIT
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
- No GitHub releases; pin a commit or tag instead of a release.
General guidance from repository metadata, not legal advice. How we score
From the README
Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft Sentinel and provide you security content to secure your environment and hunt for threats. The hunting queries also include Microsoft 365 Defender hunting queries for advanced hunting scenarios in both Microsoft 365 Defender and Microsoft Sentinel. You can also submit to issues for any samples or resources you would like to see here as you onboard to Microsoft Sentinel. This repository welcomes contributions and refer to this repository's wiki to get started. For questions and feedback, please contact [email protected]
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
3.9K+119
Open issues
112+11
Compared with peers in Security
Fastest-growing repositories GStars tracks in this cohort for the week of Oct 18, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| cloudflare/security-audit-skill | 44.6K | +11.2K | 75 | — |
| vxcontrol/pentagi | 32.3K | +1.5K | 75 | 19 days ago |
| Asymptote-Labs/agent-beacon | 2.8K | +856 | 75 | 2 days ago |
| martin-olivier/airgorah | 4.8K | +531 | 75 | 28 days ago |
| caddyserver/caddy | 78.4K | +272 | 75 | 21 days ago |
| Azure/Azure-Sentinel | 6.2K | +0 | 75 | — |
| Category median | 32.3K | +856 | 75 | — |
Also by Azure
Other repositories from this maintainer that GStars tracks
- Python5.6K stars
azure-sdk-for-python
This repository is for active development of the Azure SDK for Python. For consumers of the SDK we recommend visiting our public developer docs at https://learn.microsoft.com/python/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-python.
- Python3.0K stars
PyRIT
The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
- Go1.9K stars
azure-sdk-for-go
This repository is for active development of the Azure SDK for Go. For consumers of the SDK we recommend visiting our public developer docs at:
Discover Repositories
Search across tracked repositories by name or description