kql-microsoft-sentinel

Here are 7 public repositories matching this topic...

End-to-end Microsoft Sentinel SOC lab: KQL detections and threat hunts for SSH brute force (T1110) and malicious PowerShell (T1059.001).

Awesome Kusto Query Language (KQL)

awesome awesome-list awesome-lists kql kql-queries kql-microsoft-sentinel kql-siem

Hybrid SIEM evaluation — Microsoft Sentinel + KQL, live-compared against an existing Wazuh SOC lab

SOC Phishing Email Investigation & Automated Response using Microsoft Sentinel, KQL, MITRE ATT&CK and SOAR, N8N

security playbook cybersecurity siem soc microsoft-azure blue-team microsof homelab-setup kql-microsoft-sentinel kql-siem

Data Analyst

Information Security Analyst

Application of the HITS Threat Hunting Framework incorporating agentic AI for delivery across Sentinel, Defender and the wider Microsoft ecosystem

To associate your repository with the kql-microsoft-sentinel topic, visit your repo's landing page and select "manage topics."