benscha/KQLAdvancedHunting

Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MITRE ATT&CK mapping.

语言：PowerShell · GitHub 星标：185 · Fork：26

话题：advanced-hunting · blue-team · defender-xdr · detection-engineering · kql · kql-queries · kql-threathunting · logicapps

在 GitHub 上查看原仓库