Azure Sentinel

@AzureSentinel
50 followers944 downloads1,418 copies43 likes37,652 views

1,223 detections

Identify registry modifications that is indicative of a ransom note tied to DEV-0270.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
Use this query to locate successful delivery of associated malicious downloads that can lead to ransomware
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query helps reviewing malicious clicks where user was allowed to proceed through malicious URL page.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query helps reviewing the list of top 10% of most attacked users
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
Advanced Hunting has default timezone as UTC time. Filters in Advanced Hunting also work in UTC by default whereas query results are shown in local time if user has selected local time zone in security center settings.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query helps getting GeoIP information of emails SenderIPv4 addresses.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query helps in reviewing malicious emails allowed due to user overrides
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query uncovers seen connected networks
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query presents statistics on count and percentage of DeviceType out of total inventory
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
This query provides the commonality of operating systems seen in the inventory
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
Page 109 of 123