Verify configuration are aligning with recommended settings when performing an evaluation of Microsoft Defender Antivirus and Microsoft Defender for Endpoint. After installation use the Get-DefenderEvaluationReport command to run a report.

Get endpoints, incidents and alerts from the Cortex XDR API

Analyzes Microsoft Defender for Office 365 permissions, directory roles, access types, and authentication modes. Provides tailored recommendations for any missing permissions required to perform specific actions within the Defender portal.

The unofficial API cmdlet to interact with the Microsoft Defender XDR portal

Module for running XQL-queries vs. Palo Alto Cortex or XSIAM API using PowerShell

PowerShell module for converting Defender XDR detection rules between YAML and JSON formats and deploying them in a GitHub CI/CD pipeline.