README

Microsoft Sentinel and Microsoft 365 Defender 
Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft Sentinel and provide you security content to secure your environment and hunt for threats. The hunting queries also include Microsoft 365 Defender hunting queries for advanced hunting scenarios in both Microsoft 365 Defender and Microsoft Sentinel. You can also submit to issues for any samples or resources you would like to see here as you onboard to Microsoft Sentinel. This repository welcomes contributions and refer to this repository's wiki to get started. For questions and feedback, please contact [email protected] 

 Resources
 Microsoft Sentinel documentation
 Microsoft 365 Defender documentation
 Security Community Webinars
 Getting started with GitHub

We value your feedback. Here are some channels to help surface your questions or feedback:
1. General product specific Q&A for SIEM and SOAR - Join in the Microsoft Sentinel Tech Community conversations
2. General product specific Q&A for XDR - Join in the Microsoft 365 Defender Tech Community conversations
3. Product specific feature requests - Upvote or post new on Microsoft Sentinel feedback forums
4. Report product or contribution bugs - File a GitHub Issue using Bug template
5. General feedback on community and contribution process - File a GitHub Issue using Feature Request template


 Contribution guidelines

This project welcomes contributions and suggestions.  Most contributions require you to agree to a
Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us
the rights to use your contribution. For details, visit https://cla.microsoft.com.

 Add in your new or updated contributions to GitHub
Note: If you are a first time contributor to this repository, General GitHub Fork the repo guidance before cloning or Specific steps for the Sentinel repo. 

 General Steps
Brand new or update to a contribution via these methods:
 Submit for review directly on GitHub website 
     Browse to the folder you want to upload your file to
     Choose Upload Files and browse to your file. 
     You will be required to create your own branch and then submit the Pull Request for review.
 Use GitHub Desktop or Visual Studio or VSCode
     Fork the repo  
     Clone the repo
     Create your own branch
     Do your additions/updates in GitHub Desktop
     Be sure to merge master back to your branch before you push. 
     Push your changes to GitHub

 Pull Request
 After you push your changes, you will need to submit the Pull Request (PR)
 Details about the Proposed Changes are required, be sure to include a minimal level of detail so a review can clearly understand the reason for the change and what he change is related t

Top issues