Steven Lim
@KQLWizardKQLWizard.comTrusted contributorCompletionist
579 followers2,075 downloads19,431 copies853 likes146,849 views
541 detections
Filters
Last updated
All Time
Detection languages
539
2
Categories
107
71
61
60
58
Platforms
204
148
139
31
31
Products / Services
164
160
62
60
35
MITRE Techniques
215
201
182
167
137
CVEs
2
1
1
1
1
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: Malware C2 Comms over Azure Blob Metadata
KQL Query from file: Endpoint SMB exposed on Public Internet
KQL Query from file: LockBit Black Ransomware
KQL Query
KQL Query from file: T1555.003 - Credentials from Web Browsers
KQL Query from file: KQL to check Azure API spray attacks
KQL Query from file: DISCOVERY: Obsolete device connecting to Entra
KQL Query from file: Hunting Rogue Endpoints via SMB Detection
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
Page 38 of 55