[IC] - Classifying HTTP Status Code and detecting possible Threats
The following query is oriented to extend information about the potential threats associated with distinct HTTP status code. This allows me to quickly work with other KQL queries to identify potential threats. Consider this KQL query as a "Pivot Table" for multiple queries that can be triggered based on your criteria.
Microsoft Sentinel (KQL)
