Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Query-Hub — CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are automatically published to cql-hub.com , making them easily accessible to the community. | Kitploit
Tools/GitHubGitHub/byteray-labs/query-hub
Threat IntelligenceLearning & EducationCurated ResourcesLog Analysis
GitHubbyteray-labs/query-hub

Query-Hub

CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are automatically published to cql-hub.com , making them easily accessible to the community.

View Repository
76271 day agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

CQL-Hub | CrowdStrike SIEM & LogScale Queries

Welcome to the CQL-Hub Backend Repository

This repository powers cql-hub.com: A free, community-driven hub for CrowdStrike Falcon SIEM queries.
All queries stored here are automatically published and made visible on the CQL-Hub website, making it easier for everyone to discover, share, and use detection and hunting queries.

About

  • Community-first: Contributions from security practitioners worldwide.
  • Free & Open: All queries are open source and available for everyone to use.
  • Structured & Searchable: Queries are stored in YAML format with metadata, making them easy to filter, search, and organize on cql-hub.com.

How to Use

  1. Visit cql-hub.com to browse and search the queries.
  2. Copy the CQL into Falcon SIEM or select your Falcon region and hit "Run Query in Falcon"

Contributing

We welcome contributions from the community!

  • If you want to submit a new query, please read our Contributing Guide.
  • Use the CQL Hub YAML Builder to create queries in the correct format.
  • Queries submitted here will automatically appear on the CQL-Hub site once merged.

License

This repository is released under the MIT License.
All queries are free to use, share, and adapt. Attribution is appreciated.

Download Tool