3 results for “topic:hunting-queries”
Curated CTI investigations and queries
Project-SABER: A repository of KQL queries and parsers for threat hunting, threat detection, and log parsing in Microsoft Sentinel & Microsoft XDR (formerly Microsoft 365 Defender)
This repo contains, KQL, YARA, Sigma hunting and detection rules