Popular repositories Loading

1. Sus-TLD-plain Sus-TLD-plain Public

   used to crosscheck a list of sus

2. msf-public-ips msf-public-ips Public

   used to crosscheck msf ips

3. Hunting-Queries-Detection-Rules Hunting-Queries-Detection-Rules Public

   Forked from Bert-JanP/Hunting-Queries-Detection-Rules

   KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

   Python

4. AdvancedHuntingQueries AdvancedHuntingQueries Public

   Forked from lawndoc/AdvancedHuntingQueries

   Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant

5. KQL-threat-hunting-queries KQL-threat-hunting-queries Public

   Forked from cyb3rmik3/KQL-threat-hunting-queries

   A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

6. Sentinel-Queries Sentinel-Queries Public

   Forked from reprise99/Sentinel-Queries

   Collection of KQL queries