Steven Lim
@KQLWizardKQLWizard.comTrusted contributorCompletionist
579 followers2,219 downloads21,194 copies871 likes151,520 views
546 detections
Filters
Last updated
All Time
Detection languages
544
2
Categories
107
71
61
60
58
Platforms
204
148
139
31
31
Products / Services
164
160
62
60
35
MITRE Techniques
215
201
182
167
137
CVEs
2
1
1
1
1
https://www.microsoft.com/en-us/security/blog/2026/04/18/crosstenant-helpdesk-impersonation-data-exfiltration-human-operated-intrusion-playbook/
https://github.com/Nightmare-Eclipse/UnDefend
https://github.com/Nightmare-Eclipse/RedSun/blob/main/README.md
https://github.com/blackarrowsec/redteam-research/tree/master/CVE-2026-33829
KQL Query from file: DefenderXDR BlueHammer Detection
KQL Query from file: Admin consent for M365 Connector for Claude
KQL Query
KQL Query from file: M365 Connector for Claude Detection
KQL Query from file: KQL Detection for MDI Password Protection Insight
KQL Query from file: Axios Compromise Detection via 3rd Party
Page 10 of 55