Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

The Hunt for QR Phisher

Steven Lim@KQLWizard

•updated Jul 1, 2025•11•0•134

KQL Query from file: The Hunt for QR Phisher

Microsoft Sentinel (KQL)

Tags

T1566.002 - Spearphishing Link T1204.001 - Malicious Link T1590.005 - IP Addresses T1592.001 - Hardware T1071.001 - Web Protocols T1589.002 - Email Addresses T1078.003 - Local Accounts TA0001 - Initial Access TA0002 - Execution TA0043 - Reconnaissance TA0011 - Command and Control TA0005 - Defense Evasion TA0003 - Persistence TA0004 - Privilege Escalation T1593.003 - Code Repositories T1116 - Code Signing T1553.002 - Code Signing T1566 - Phishing T1598 - Phishing for Information T1557 - Adversary-in-the-Middle TA0006 - Credential Access TA0009 - Collection Email Received Email Phishing Detected Network Connection Authentication Attempt XDR Alert Office 365 Azure M365 Unified Audit Log Azure Ad Risk Detection Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?