Self-hosted Microsoft 365 security operations dashboard — aggregates Defender XDR, Entra ID Protection, Intune, Compliance and more into one place.

This repository is deprecated

Security advisories from Microsoft, Palo Alto, and Splunk — all in one place.

Non-Official Browser Extension for Defender XDR

Claude-powered SOC analyst agent for the terminal. Investigates incidents via Sentinel KQL, XDR, and Entra ID — and can execute containment actions (password reset, machine isolation) with confirmation gates.

AI to detect the suspicious behavior