Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

DefenderXDR Weekly OSINT Indicators Scan 10032025

Steven Lim@KQLWizard

•updated Jul 1, 2025•3•0•51

KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025

Microsoft Sentinel (KQL)

Tags

T1070 - Indicator Removal T1066 - Indicator Removal from Tools T1027.005 - Indicator Removal from Tools T1054 - Indicator Blocking T1588.002 - Tool T1071.001 - Web Protocols T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol TA0005 - Defense Evasion TA0042 - Resource Development TA0011 - Command and Control TA0010 - Exfiltration Email Attachment Downloaded Email Malware Detected Network Connection File Event File Creation DNS Query HTTP Request Windows Office 365 Windows Defender Atp M365 Unified Audit Logkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?