kql-microsoft-sentinel

Here are 6 public repositories matching this topic...

End-to-end Microsoft Sentinel SOC lab: KQL detections and threat hunts for SSH brute force (T1110) and malicious PowerShell (T1059.001).

Awesome Kusto Query Language (KQL)

awesome awesome-list awesome-lists kql kql-queries kql-microsoft-sentinel kql-siem

SOC Phishing Email Investigation & Automated Response using Microsoft Sentinel, KQL, MITRE ATT&CK and SOAR

security playbook cybersecurity siem soc microsoft-azure blue-team microsof homelab-setup kql-microsoft-sentinel kql-siem

Data Analyst

Information Security Analyst

Application of the HITS Threat Hunting Framework incorporating agentic AI for delivery across Sentinel, Defender and the wider Microsoft ecosystem

Add a description, image, and links to the kql-microsoft-sentinel topic page so that developers can more easily learn about it.

To associate your repository with the kql-microsoft-sentinel topic, visit your repo's landing page and select "manage topics."