Steven Lim
@KQLWizardKQLWizard.comTrusted contributorCompletionist
579 followers2,219 downloads21,193 copies871 likes151,515 views
546 detections
Filters
Last updated
All Time
Detection languages
544
2
Categories
107
71
61
60
58
Platforms
204
148
139
31
31
Products / Services
164
160
62
60
35
MITRE Techniques
215
201
182
167
137
CVEs
2
1
1
1
1
KQL Query from file: Analysis of Kali365 by ASN Over Past 30 days
https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/
https://yeethsecurity.com/blog/2026-08-06-Solidity-Pro-WhiteCobra-C2-to-Telegram
https://socket.dev/blog/popular-npm-packages-in-the-keyv-and-cacheable-namespaces-compromised-in-active-supply-chain
https://dirkjanm.io/borrowing-windows-hello-keys/
https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/
https://notepad-plus-plus.org/news/hijacked-incident-info-update/
https://notepad-plus-plus.org/news/hijacked-incident-info-update/
https://www.manifold.security/blog/open-vsx-evil-twin-extensions
https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26
https://www.zscaler.com/blogs/security-research/claudefix-shared-claude-chats-meet-clickfix
KQL Query from file: Indirect Prompt Injection Risk Assessment
Page 4 of 55