KQL Queries. Microsoft Defender, Microsoft Sentinel
security
azure
detection
sentinel
dfir
hunting
azuread
kql
defenderforendpoint
defenderforidentity
entraid
defenderxdr
-
Updated
Jun 25, 2024
KQL Queries. Microsoft Defender, Microsoft Sentinel
KQL Queries. Microsoft Defender, Microsoft Sentinel
This repository contains a selection of Kusto Query Language (KQL) queries designed for proactive threat hunting. Aligned with the MITRE ATT&CK framework, these queries are crafted to detect and address potential threats effectively.
Add a description, image, and links to the defenderxdr topic page so that developers can more easily learn about it.
To associate your repository with the defenderxdr topic, visit your repo's landing page and select "manage topics."