cyb3rmik3/KQL-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

↗ Open on GitHub

Stars

796

Forks

97

Language

—

License

MIT

Last push

3 months ago

security microsoft threat-detection threat-hunting microsoft-365 kql kusto kusto-query kusto-query-language microsoft-365-defender microsoft-365-security microsoft-security microsoft-sentinel microsoft-xdr microsoftxdr securitycenter sentinel threat-detecting threat-hunt

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.