Hunting-Queries-Detection-Rules
by Bert-JanP
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
AI summary
Security queries
Provides KQL queries for hunting and detection in security logs
- stars
- 1.3K
- forks
- 238
- watching
- 64
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Threat Hunting Platform
A collection of tools and resources for threat hunters to identify and respond to cyber threats.
Hunting query generator
An automation tool that integrates Microsoft Security Baselines and MITRE ATT&CK to generate hunting queries for security operation centers.
Malware scanner
Helps Threat Intelligence researchers hunt for new malware by efficiently scanning large collections of files with Yara rules
Network anomaly detector
Provides Suricata IDS alert rules for detecting network anomalies
Threat hunting tools
Collection of resources and concepts for threat hunting and detection engineering.
Vulnerability scanner
A tool that automates the process of detecting and exploiting SQL injection vulnerabilities in web applications.
Query analyzer
Real-time analytics framework for SPARQL queries
Query monitor
A PostgreSQL extension that monitors and controls incoming queries to prevent SQL injections and unwanted activity.
Domain scanner
Tools and rules for detecting malicious domain calls in endpoint malware
Threat hunter
A tool to quickly deploy a threat hunting capability on Azure Sentinel using Sysmon and MITRE ATT&CK
Threat hunter
Automates scanning of publicly hosted pasted data against Yara rules to identify potential security or research threats.
Query counter
Prints DB query counts in Django's runserver console output.
IDPS templates
Templates and dashboards for threat hunting with Suricata IDPS/NSM and the ELK 7 stack
Security toolkit
An open-source project that explores the intersection of machine learning and security to develop tools for detecting vulnerabilities in web applications.
NewSQL DB
A low-latency, high-TPS hybrid relational-NOSQL database system with embedded Lua scripting support and Redis integration.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions Hunting-Queries-Detection-Rules.
