Cyberlorians/container-validation
De-identified GCC High Linux host and container protection validation matrix
Repositories
Cyberlorians/xdrurbac
Cyberlorians/mde-agent-lab
Repeatable Windows AI coding-agent installer and Microsoft Defender for Endpoint visibility lab guide
Cyberlorians/XDR-Rollout
Cyberlorians/azure-rbac-assignment-exporter
Export Azure RBAC assignments across Commercial and GCC High subscriptions.
Cyberlorians/Workbooks
Cyberlorians/Sentinel-Assessment
Sentinel Assessment tool for reviewing deployments
Cyberlorians/Articles
Cyberlorians/mde-tvm-ingestion
Scalable Microsoft Defender Vulnerability Management (TVM) export into Sentinel via Azure Functions and the Logs Ingestion API. Secret-less, managed-identity only.
Cyberlorians/a365-hub
Open workshop kit for Microsoft Entra Agent ID and Agent 365: secret-less onboarding, security labs, detections, and CTF roadmap
Cyberlorians/usag-class
USAG Cyber Defense - CyberDefense-READ user & admin onboarding guides
Cyberlorians/CMMC
Cyberlorians/MSISR
Cyberlorians/MISP-GCCH
Cyberlorians/UALTimeBomb
Microsoft Sentinel and Defender Live Response workflow for UAL TimeBomb access lockout and restore
Cyberlorians/CyberTriage
Cyberlorians/KQL
Cyberlorians/mde-av-exclusion-import-toolkit
PowerShell toolkit to create Microsoft Defender AV exclusion policies from an Excel workbook.
Cyberlorians/attackiqkqlsession
AttackIQ Endpoint EDR KQL training session
Cyberlorians/iq
Cyberlorians/MDE
Cyberlorians/nistframework
Cyberlorians/Sentinel
Cyberlorians/M-21-31
Cyberlorians/ZTAssessment
Cyberlorians/Obsidian-GCCH
Cyberlorians/daily
Cyberlorians/GCCH-CrowdStrikeCCP
Cyberlorians/Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.