SlimKQL/Hunting-Queries-Detection-Rules：KQL 查询

943

BSD 3-Clause "New" or "Revised" License

项目介绍

SlimKQL/Hunting-Queries-Detection-Rules 是一个托管在 GitHub 上的开源项目，主要使用 JavaScript 编写，采用 BSD 3-Clause "New" or "Revised" License 许可证，目前获得 943 个 Star、161 次 Fork。

仓库全名: SlimKQL/Hunting-Queries-Detection-Rules
开源许可证: BSD 3-Clause "New" or "Revised" License
Star 数: 943
Fork 数: 161
未关闭 Issue: 10

README 摘要

KQLWizard 🧙‍♂️ - KQL Sentinel & Defender queries The purpose of this repository is to share KQL queries and threat‑hunting detections that anyone can use to strengthen their defenses. These queries are designed to expand detection coverage across Microsoft Security product logs, helping uncover activities that may not trigger alerts by default. By leveraging logs, many otherwise hidden behaviors can be surfaced and…

完整内容见 GitHub 原始 README 或本页。