Multiple large queries made by user
'This hunting query looks for users who are running multiple queries that return either a very large amount of data or the maximum amount allowed by the query method.'
Microsoft Sentinel (KQL)
'This hunting query looks for users who are running multiple queries that return either a very large amount of data or the maximum amount allowed by the query method.'
Already have an account?