MITRE - Suspicious Events
Description:. The query looks for several different MITRE techniques, grouped by risk level. A weighting is applied to each risk level and a total score calculated per machine. Techniques can be added/removed as required.
Microsoft Sentinel (KQL)
