[redteam.to]
Tools Submit
← All tools

MDE-DFIR-Resources

https://github.com/cyb3rmik3/MDE-DFIR-Resources
Open Source
Categories
Forensics
Description

A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.

Keywords
curated-collections curated-list dfir digital-forensics digital-forensics-incident-response incident-response kql kusto kusto-query kusto-query-language live-response mde microsoft microsoft-defender-for-endpoint resources
See also
toolkit
Free

The essential toolkit for reversing, malware analysis, and cracking…

speakeasy
Open Source

Windows kernel and user mode emulation.…

soSaver
Open Source

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.…

SM-A217F_forensics
Free

Samsung modem commands over USB serial connection and secret dialer codes extracted from system pack…

savvy-cli
Open Source

Automatically capture and surface your team's tribal knowledge…

htmldate
Open Source

Fast and robust date extraction from web pages, with Python or on the command-line…

© 2026 redteam.to — The Pentest Tool Directory

For authorized security testing and educational use only.