KQL Queries. Microsoft Defender, Microsoft Sentinel
-
Updated
Oct 4, 2026 - JavaScript
#
defenderxdr
Here are 9 public repositories matching this topic...
KQL Queries. Microsoft Defender, Microsoft Sentinel
security azure detection sentinel dfir hunting azuread kql defenderforendpoint defenderforidentity entraid defenderxdr
-
Updated
Jun 29, 2026
A mirror image of my detection rules
-
Updated
Sep 27, 2026
A set of importable Intune policies that simplify onboarding/offboarding MacOS devices to/from Defender for Business/Endpoint.
macos mac defender endpoint intune endpoint-security defender-atp defender-for-endpoint endpoint-management defenderxdr
-
Updated
Sep 29, 2026
Microsoft Defender XDR threat hunting KQL queries
microsoft azure threat sentinel defender threat-hunting threat-intelligence mitre-attack threat-detection kql threathunting defenderxdr
-
Updated
Aug 19, 2026
JSON-driven Microsoft Defender for Endpoint policy deployment toolkit focused on repeatable endpoint hardening, validation, and deployment consistency using Microsoft Graph.
-
Updated
May 28, 2026 - PowerShell
KQL-Queries 🐙 provides ready KQL scripts for Microsoft Defender XDR threat hunting, helping security teams detect, investigate, and respond to threats.
sentinel dfir misp hunting vulnerability-management mde blueteam mdi mitre-attack securitycenter kusto kusto-language threat-hunt threatdetection microsoft-security microsoft-365-defender microsoft-xdr defenderxdr
-
Updated
Oct 7, 2026
KQL Queries for Microsoft Sentinel and Microsoft Defender XDR
microsoft azure sentinel defender threat-hunting mitre mitre-attack kql threatdetection defenderxdr kql-threathunting kql-queries
-
Updated
Sep 13, 2025
Searchable library of KQL queries for Microsoft security products, with category browsing and one-click copy.
-
Updated
Oct 6, 2026 - TypeScript
Add this topic to your repo
To associate your repository with the defenderxdr topic, visit your repo's landing page and select "manage topics."