KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Repository Index
47,133 repositories indexed
1–4 of 4 · Most stars
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
Sigma Queries turned into KQL for Defender using pysigma - Automated
- detection-engineering
- kql
- microsoftsentinel
- mitre-attack
Sigma Queries turned into SPL for Splunk Enterprise and Enterprise Security using pysigma - Automated