-
Notifications
You must be signed in to change notification settings - Fork 371
Pull requests: reprise99/Sentinel-Queries
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add PowerShell abuse detection KQL query for Defender for Endpoint
#34
opened Jul 6, 2025 by
nezercoker
Loading…
Update Identity-DetectingFirstTimeAccesstoAzureManagement.kql
#30
opened Jan 2, 2024 by
Bert-JanP
Loading…
Interchange difference times in Identity-SSPRfollowedbyRiskySignin.kql
#24
opened May 4, 2023 by
ep3p
Loading…
Question about passwordless phone sign-in credential in Audit-MFAChangesforPrivlegedUsers.kql
#20
opened Mar 8, 2023 by
ep3p
Loading…
ProTip!
Mix and match filters to narrow down what you’re looking for.