
Hunting-Queries-Detection-Rules
The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…
cloud-securityincident-responselog-analysis+1

The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…

This repository contains Velociraptor artifact and Chainsaw rules to help detect Microsoft Remote Access VPN activity