Azure Sentinel
@AzureSentinel50 followers965 downloads1,435 copies43 likes37,857 views
1,223 detections
Filters
Last updated
All Time
Detection languages
1,223
Categories
220
218
180
171
135
Platforms
766
284
188
78
29
Products / Services
492
297
159
152
93
MITRE Techniques
530
485
467
348
348
Search for the creation of a new user using a known DEV-0270 username/password schema.
Identify registry modifications that is indicative of a ransom note tied to DEV-0270.
Use this query to locate successful delivery of associated malicious downloads that can lead to ransomware
This query helps reviewing malicious clicks where user was allowed to proceed through malicious URL page.
This query helps reviewing the list of top 10% of most attacked users
Advanced Hunting has default timezone as UTC time. Filters in Advanced Hunting also work in UTC by default whereas query results are shown in local time if user has selected local time zone in security center settings.
This query helps getting GeoIP information of emails SenderIPv4 addresses.
This query helps in reviewing malicious emails allowed due to user overrides
This query uncovers seen connected networks
This query presents statistics on count and percentage of DeviceType out of total inventory
Page 109 of 123