Use KQG and generate Kusto scripts | Used with Defender ATP
-
Updated
Dec 1, 2023
Use KQG and generate Kusto scripts | Used with Defender ATP
Config files for my GitHub profile.
Custom made Query which you can run in your Microsoft Defender - Advanced Hunting tool to look for network activity related to Egregor Ransomware.
PowerShell for Threat Management Explorer
Defender for Endpoint Advanced Hunting Queries
Deploy Microsoft Defender Endpoint for Linux with Ansible
A PowerShell module to interact with Microsoft's Defender for Endpoint API.
Add-on to onboard telemetry data via Microsoft Defender ATP hunting API in Splunk (ES)
Hunting Queries for Defender ATP
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant
Hunting queries and detections
Add a description, image, and links to the defender-atp topic page so that developers can more easily learn about it.
To associate your repository with the defender-atp topic, visit your repo's landing page and select "manage topics."