替代方案

Hunting-Queries-Detection-Rules

Bert-JanP/Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

标签

  • azure
  • defender-for-endpoint
  • dfir
  • kql
  • sentinel
  • threat-hunting
  • vulnerability-management
  • zero-day