Microsoft-Sentinel-Queries

KQL queries for cyber defense and for solving daily issues

Name		Name	Last commit message	Last commit date
Latest commit History 380 Commits
AKS		AKS
Auditing		Auditing
Az		Az
Azure SQL		Azure SQL
AzureThreatMatrix		AzureThreatMatrix
CustomConnectors/Edgio		CustomConnectors/Edgio
EntraID Signins		EntraID Signins
EntraID		EntraID
MigrationQueries		MigrationQueries
Parsers		Parsers
Storage Accounts		Storage Accounts
ThreatHunting		ThreatHunting
Threats		Threats
Windows		Windows
Zerodays		Zerodays
AgentHeartBeatIgnoreDeadMachines.kql		AgentHeartBeatIgnoreDeadMachines.kql
CountOfEvents.kql		CountOfEvents.kql
DailyCapReached.kql		DailyCapReached.kql
DataIngestionFirewallSources.kql		DataIngestionFirewallSources.kql
DefenderEndpointLinuxDeviceHealth		DefenderEndpointLinuxDeviceHealth
Detect-Follina-Exploitation.kql		Detect-Follina-Exploitation.kql
DetectLogIngestionStoppage.kql		DetectLogIngestionStoppage.kql
LICENSE		LICENSE
README.md		README.md
SuddenSpikeInDataIngestion.kql		SuddenSpikeInDataIngestion.kql
Telnetcheck.ps1		Telnetcheck.ps1

Provide feedback