Hunting-Queries-Detection-Rules icon indicating copy to clipboard operation
Hunting-Queries-Detection-Rules copied to clipboard

verified publisher icon Bert-JanP
→

Metadata

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Results 1 Hunting-Queries-Detection-Rules issues
Sort by recently updated
recently updated
newest added

Add monitoring for cloud break glass accounts

3 comment

Hey there This detection rule would be able to detect if any activity is performed from a cloud break glass account. this helps to monitor any activities performed by these...

erikgruetter avatar erikgruetter

← Metadata

1.0k
Stars
188
Forks
Watchers

Owner

verified publisher icon Bert-JanP

Metadata

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Back