Cyb3r-Monk/Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

↗ Open on GitHub

Stars

826

Forks

115

Language

Jupyter Notebook

License

BSD-3-Clause

Last push

4 weeks ago

Jupyter Notebook cybersecurity threat-detection dfir threat-hunting detection-engineering kql microsoft-sentinel defender-for-endpoint kusto-language

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.