Azure Sentinel

@AzureSentinel
50 followers944 downloads1,418 copies43 likes37,654 views

1,223 detections

This query checks for attempts to turn off at least 10 existing services using sc.exe.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
1012
This query checks alerts related to file backup deletion and enriches with additional alert evidence information
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query visualises the total amount of admin false negative or false positive submissions by the verdict of the submission grading.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query helps reviewing user reported email submissions
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query visualises the total amount of admin false positive submission by submission type.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query helps reviewing status of submissions
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query visualises the top admins performing false positive submissions
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
In this query, we are looking for emails containing malware attachment sent by an internal sender
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query visualises the amount of emails subject to a user type policy with action of allow, summarizing the data by type of override and threats type found
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
This query uncovers seen IPAddressV6 network subnets
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0012
Page 97 of 123