Pinned

1. Threat-Hunting-and-Detection Threat-Hunting-and-Detection Public

   Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

   Jupyter Notebook 566 91

2. ACCD ACCD Public

   Active C&C Detector

   Jupyter Notebook 145 12

3. RITA-J RITA-J Public

   Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

   Jupyter Notebook 188 28

4. azure-kql azure-kql Public

   Azure KQL (Kusto Query Language) tips, tricks and best practices for Threat Hunting, Blue Teaming, etc.

   3

5. Cheat-Sheets Cheat-Sheets Public

   Cheat sheets for threat hunting, detection and other stuff.

   29 5

6. blue-teaming-with-kql blue-teaming-with-kql Public

   Forked from ashwin-patil/blue-teaming-with-kql

   Repository with Sample KQL Query examples for Threat Hunting

   8 3