PowerShell Module for managing Microsoft Defender Advanced Threat Protection

AutoSpamEmailScan.ps1 is used to monitor a specific mailbox that enterprise users can forward suspicious spam emails to a specific mailbox.

Analysis-oriented command line tool for remote execution and triage via EDRs API

Advanced Hunting Queries for Microsoft Defender Advanced Threat Protection

Powershell scripts I made that I use to demo or test things for customers

DEL-MDATP-IOC.ps1 is used to delete the IOCs on Microsoft Defender ATP.

PowerShell for Threat Management Explorer