GitHub - ank0ku/KQL: KQL Queries for use in Defender and Sentinel

ank0ku / KQL Public

KQL Queries for use in Defender and Sentinel

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 7 Commits
ASR.kql		ASR.kql
ConditionalAccessPolicyActivity.kql		ConditionalAccessPolicyActivity.kql
Count-Incidents-Closed-By-Users.kql		Count-Incidents-Closed-By-Users.kql
Count-Quarantined-Emails-By-Sender-Domain.kql		Count-Quarantined-Emails-By-Sender-Domain.kql
Entra_Password_Protection_Violation_Audit.kql		Entra_Password_Protection_Violation_Audit.kql
Executables-Downloaded-By-Browser.kql		Executables-Downloaded-By-Browser.kql
Top-100-Quarantined-Emails-Summarized-By-SenderIPv4-EmailAddress-Domain.kql		Top-100-Quarantined-Emails-Summarized-By-SenderIPv4-EmailAddress-Domain.kql