mr-r3b00t / KQL Public

Notifications You must be signed in to change notification settings
Fork 2
Star 9

This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet

9 stars 2 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 16 Commits
hunting		hunting
README.md		README.md

Repository files navigation

KQL

This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet

Remember

Filenames can be changed File hashes can be changed Ports can be altered Signing Certs can be stolen IPs can be rotated etc.

Welcome to the cyber layer cake son!

About

This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet

Report repository

Releases

No releases published

Packages

No packages published

Contributors 2