Azure-Sentinel/Hunting Queries/Microsoft 365 Defender
v-atulyadav a3b1623b2b
Merge pull request #9854 from JouniMi/THqueries
Adding hunt queries, regsvr32, rundll32 and image based payload delivery
2024-02-06 16:15:53 +05:30
..
ASR rules
Campaigns
Cloud Apps
Collection
Command and Control
Credential Access
Defense evasion Shorten the descriptions to fit the requirements 2024-02-05 22:01:55 +02:00
Delivery
Device Inventory
Discovery
Email Queries
Execution Shorten the descriptions to fit the requirements 2024-02-05 22:01:55 +02:00
Exfiltration
Exploits
Fun
General queries
Impact
Initial access
Lateral Movement
Network
Persistence Adding a query looking for rare processes as a service 2024-02-05 22:04:05 +02:00
Privilege escalation
Protection events
Ransomware
RemoteManagementMonitoring
TVM
Troubleshooting