Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

DefenderXDR Weekly OSINT Indicators Scan 05052025

Steven Lim@KQLWizard

•updated Jul 1, 2025•8•0•60

KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025

Microsoft Sentinel (KQL)

Tags

M1019 - Threat Intelligence Program M1056 - Pre-compromise T1580 - Cloud Infrastructure Discovery T1070 - Indicator Removal T1054 - Indicator Blocking T1562.006 - Indicator Blocking T1071.001 - Web Protocols T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol T1566.001 - Spearphishing Attachment T1566.002 - Spearphishing Link T1027 - Obfuscated Files or Information T1041 - Exfiltration Over C2 Channel T1071 - Application Layer Protocol T1566 - Phishing TA0007 - Discovery TA0005 - Defense Evasion TA0011 - Command and Control TA0010 - Exfiltration TA0001 - Initial Access Email Attachment Downloaded Email Malware Detected File Event Network Connection HTTP Request Windows Office 365 M365 Unified Audit Log Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?