Steven Lim
@KQLWizardKQLWizard.comTrusted contributorCompletionist
579 followers2,219 downloads21,204 copies871 likes151,530 views
546 detections
Filters
Last updated
All Time
Detection languages
544
2
Categories
107
71
61
60
58
Platforms
204
148
139
31
31
Products / Services
164
160
62
60
35
MITRE Techniques
215
201
182
167
137
CVEs
2
1
1
1
1
KQL Query
KQL Query from file: Detecting Abuse of Wevtutil.exe in LOLBAS Attacks
KQL Query from file: Conditional Access Report
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Remote code execution exploit chain in OpenVPN
KQL Query from file: Social Engineering Attack Detection
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: Hunting Rockstar 2FA
KQL Query from file: EntraFalcon Detection
KQL Query from file: MDE: Detecting Quick Assist Usage
Page 29 of 55