Search

KQL Queries. Microsoft Defender, Microsoft Sentinel

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

KQL Queries. Microsoft Defender, Microsoft Sentinel

Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MITRE ATT&CK mapping.

Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules

Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites

Repository hosting windows defender DOS tool

RoguePlanet Windows Defender Vulnerability

Windows Defender 0day vulnerability