KQL Detections

KQL Detections for use in Azure Sentinel and MDE Advanced Hunting/Custom Detections

👤 Author

Rory Wagner - @Sleuthifer
https://www.linkedin.com/in/rorywagner/

Name		Name	Last commit message	Last commit date
Latest commit History 22 Commits
Component-Object-Model-(COM)-Hijacking.kql		Component-Object-Model-(COM)-Hijacking.kql
DetectionTemplate.md		DetectionTemplate.md
Guest-Account-Activated		Guest-Account-Activated
Image-File-Execution-Options-(IFEO)-Injection.kql		Image-File-Execution-Options-(IFEO)-Injection.kql
New-Startup-Item.kql		New-Startup-Item.kql
README.md		README.md
Registry-Run-Key-Modification.kql		Registry-Run-Key-Modification.kql
Suspicious-Outbound-HTTP-UserAgent		Suspicious-Outbound-HTTP-UserAgent