Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MITRE ATT&CK mapping.
sentinel threat-hunting blue-team logicapps security-operations kql detection-engineering microsoft-sentinel advanced-hunting m365-defender defender-xdr kql-threathunting kql-queries
-
Updated
Jun 2, 2026 - PowerShell