Azure-Sentinel/Hunting Queries/ASimProcess
..
Discorddownloadinvokedfromcmdline(ASIMVersion).yaml
imProcess_Certutil-LOLBins.yaml
imProcess_Dev-0056CommandLineActivityNovember2021(ASIMVersion).yaml
imProcess_ExchangePowerShellSnapin.yaml
imProcess_HostExportingMailboxAndRemovingExport.yaml
imProcess_Invoke-PowerShellTcpOneLine.yaml
imProcess_NishangReverseTCPShellBase64.yaml
imProcess_PowerCatDownload.yaml
imProcess_ProcessEntropy.yaml
imProcess_SolarWindsInventory.yaml
imProcess_Suspicious_enumeration_using_adfind.yaml
imProcess_Windows System Shutdown-Reboot(T1529).yaml
imProcess_cscript_summary.yaml
imProcess_enumeration_user_and_group.yaml
imProcess_persistence_create_account.yaml
imProcess_powershell_downloads.yaml
imProcess_uncommon_processes.yaml
inProcess_SignedBinaryProxyExecutionRundll32.yaml