Product
Community
Enterprise
Plans
Intel Exchange
Intel Exchange
Detections
Resources
About
Leaderboard
Join Community
Sign In
All Detections
Part 1: Custom DefenderXDR KQL detection for fake CrowdStrike email domain
Glass
DiceBear
https://www.dicebear.com
https://creativecommons.org/publicdomain/zero/1.0/
„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
Steven Lim
@KQLWizard
•
updated Jul 1, 2025
•
3
•
0
•
28
KQL Query
Microsoft Sentinel (KQL)
Translate
Download
Copy
Sign up to view this detection
Next
or
Create account with Google
Create account with Microsoft
Already have an account?
Log in
