Microsoft-365-Defender-Hunting-Queries

Microsoft-365-Defender-Hunting-Queries copied to clipboard

Part of a series of pull requests, placing queries from the TA reports in the repo. Some of the column names may be outdated, as some of the reports are...

martyav

Hi I want to query about "Incidents" list, but can't find any query also can't find Action history query. such as isolation, virus scan...

bobose

Create DNS Server Report.csl

2

mjmelone

mjmelone

mjmelone

mjmelone

Initial check-in. Identifies rare processes based on different factors

mjmelone

Create accountlogon.txt

2

mattiasborg82