Pinned Loading

1. defender-hunt-queries defender-hunt-queries Public

   Practical KQL and ES|QL detection queries for threat hunting.

   4

2. malware-analysis malware-analysis Public

   2

3. cheatsheet cheatsheet Public

   These are some of the commands which I use frequently during Malware Analysis and DFIR.

   24 4

4. case-bundles case-bundles Public

   Sanitized Microsoft Defender for Endpoint telemetry from real lab attack emulations (RMM abuse, pre-ransomware). Load it into a free Azure Data Explorer cluster and hunt with KQL. AI-assisted, huma…

   1

5. sigma-rules sigma-rules Public

   Sigma rules