Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

BlueAlpha GammaDrop Detection

Steven Lim@KQLWizard

•updated Jul 1, 2025•2•0•41

KQL Query from file: BlueAlpha GammaDrop Detection

Microsoft Sentinel (KQL)

Tags

S0117 - XTunnel S1188 - Line Runner T1583.007 - Serverless T1027.012 - LNK Icon Smuggling T1192 - Spearphishing Link T1566.002 - Spearphishing Link T1566.001 - Spearphishing Attachment T1059 - Command and Scripting Interpreter T1071.001 - Web Protocols T1572 - Protocol Tunneling T1059.005 - Visual Basic T1204.002 - Malicious File TA0042 - Resource Development TA0005 - Defense Evasion TA0001 - Initial Access TA0002 - Execution TA0011 - Command and Control File Creation Network Connection HTTP Request Windows Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?