avatar

Steven Lim

@KQLWizard
KQLWizard.comTrusted contributorCompletionist
579 followers2,075 downloads19,418 copies852 likes146,816 views

541 detections

MC847884 - Check iOS 16 mobile outlook users due to out of support in Sep 2024

KQL
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2038

Suspicious MSHTA Usage

KQL
KQL Query from file: Suspicious MSHTA Usage
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4038

Monthly Report Entra Eligible Role Activation

KQL
KQL Query from file: Monthly Report Entra Eligible Role Activation
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2038

KQL to detect if Polyfill malicious payload was loaded

KQL
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2038

Innovative Detection Techniques Against ZIP Concatenation Attacks

KQL
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3038

EchoSpoofing

KQL
KQL Query from file: EchoSpoofing
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3038

Custom Detection Rule for CUPS Installation in DefenderXDR

KQL
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4038

Critical OpenSSH Vulnerabilities – Patch Prioritization

KQL
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4038

CVE-2025-4664 Chrome flaw with public exploit

KQL
KQL Query from file: CVE-2025-4664 Chrome flaw with public exploit
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2038

CVE-2024-49039 Windows Task Scheduler Elevation of Privilege Vulnerability

KQL
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3038
Page 49 of 55