
KQL-Hunting_and_Detection-Queries
Some of my KQL hunting queries
incident-responseioc-managementlog-analysis+1

Some of my KQL hunting queries

A curated collection of DFIR skills and workflows for InfoSec practitioners.

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea…

Extract useful information from PANOS support file for CVE-2024-3400

Indicators of Compromise from Amnesty International's cyber investigations

Defanged Indicator of Compromise (IOC) Extractor.

🔬 Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781