KNOTWEED-File Hash IOCs
'This query identifies matches based on KNOTWEED file hash IOCs across Microsoft Defender for Endpoint tables'
Microsoft Sentinel (KQL)
'This query identifies matches based on KNOTWEED file hash IOCs across Microsoft Defender for Endpoint tables'
Already have an account?