microsoft/Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

Jupyter Notebook

2,089

1,113 commits

updated Feb 17, 2022

See the code

README


page_type: sample languages:

  • kusto products:
  • Microsoft 365 Defender description: "Microsoft 365 Defender repository for Advanced Hunting"

Deprecated

We moved to Microsoft threat protection community, the unified Microsoft Sentinel and Microsoft 365 Defender repository.

Microsoft SIEM and XDR Community provides a forum for the community members, aka, Threat Hunters, to join in and submit these contributions via GitHub Pull Requests or contribution ideas as GitHub Issues. Hunting queries for Microsoft 365 Defender will provide value to both Microsoft 365 Defender and Microsoft Sentinel products, hence a multiple impact for a single contribution. These contributions can be just based on your idea of the value to enterprise your contribution provides or can be from the GitHub open issues list or even enhancements to existing contributions.

cybersecurity
hunting
sample-code

microsoft/Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

Jupyter Notebook

2,089

1,113 commits

updated Feb 17, 2022

See the code

README


page_type: sample languages:

  • kusto products:
  • Microsoft 365 Defender description: "Microsoft 365 Defender repository for Advanced Hunting"

Deprecated

We moved to Microsoft threat protection community, the unified Microsoft Sentinel and Microsoft 365 Defender repository.

Microsoft SIEM and XDR Community provides a forum for the community members, aka, Threat Hunters, to join in and submit these contributions via GitHub Pull Requests or contribution ideas as GitHub Issues. Hunting queries for Microsoft 365 Defender will provide value to both Microsoft 365 Defender and Microsoft Sentinel products, hence a multiple impact for a single contribution. These contributions can be just based on your idea of the value to enterprise your contribution provides or can be from the GitHub open issues list or even enhancements to existing contributions.

cybersecurity
hunting
sample-code

Project health

Overall

3.3/10

Maintained

0/10

Code review

2/10
OpenSSF Scorecard

Significant stargazers

Robin Hahling

179 followers · starred Sep 2018

Brendan Chamberlain

259 followers · starred Mar 2021

beerisgood

203 followers · starred Oct 2021

bernard-wagner

24 followers · starred Jun 2019