Steven Lim
@KQLWizardKQLWizard.comTrusted contributorCompletionist
579 followers2,219 downloads21,204 copies871 likes151,526 views
546 detections
Filters
Last updated
All Time
Detection languages
544
2
Categories
107
71
61
60
58
Platforms
204
148
139
31
31
Products / Services
164
160
62
60
35
MITRE Techniques
215
201
182
167
137
CVEs
2
1
1
1
1
KQL Query from file: Sentinel KQL Detection for ShadowHound
KQL Query
KQL Query from file: FileFix Detection
KQL Query from file: Monitor Privilege User SSPR
KQL Query from file: Detect Microsoft Graph API Abuse
KQL Query from file: Monitoring Cross-Tenant Abuse by Threat Actors
KQL Query from file: Password Spraying Detection in Active Directory
KQL Query from file: Suspicious CLI Obfuscation
KQL Query from file: Detecting External Microsoft Teams Spray
KQL Query from file: Sentinel All-In-One IP ThreatHunt
Page 23 of 55