mde-kql-hunting

A collection of KQL hunting queries for MDE useful for incident response and threat hunting.

Author

Name		Name	Last commit message	Last commit date
Latest commit History 11 Commits
README.md		README.md
accounts-to-devices.kql		accounts-to-devices.kql
domain-sweep.kql		domain-sweep.kql
email-campaigns.kql		email-campaigns.kql
hash-sweep.kql		hash-sweep.kql
timeline-device.kql		timeline-device.kql
usb-threats.kql		usb-threats.kql