⤷ Title: Detecting EDR Bypass using path masquerading
════════════════════════
𐀪 Author: Rogier Dijkman
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 16:03:54 GMT
════════════════════════
⌗ Tags: #kql #microsoft #cybersecurity #security
════════════════════════
𐀪 Author: Rogier Dijkman
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 16:03:54 GMT
════════════════════════
⌗ Tags: #kql #microsoft #cybersecurity #security
Medium
Detecting EDR Bypass using path masquerading
In this article I will provide a detailed KQL query to help identify suspicious behavior that may indicate a defense evasion as described…
⤷ Title: Operators in KQL- Part 2
════════════════════════
𐀪 Author: Bharath Reddy
════════════════════════
ⴵ Time: Thu, 27 Feb 2025 15:49:29 GMT
════════════════════════
⌗ Tags: #kql #operators_in_kql #intro_to_kql #microsoft_defender #cybersecurity
════════════════════════
𐀪 Author: Bharath Reddy
════════════════════════
ⴵ Time: Thu, 27 Feb 2025 15:49:29 GMT
════════════════════════
⌗ Tags: #kql #operators_in_kql #intro_to_kql #microsoft_defender #cybersecurity
Medium
Operators in KQL- Part 2
If you are someone who is looking to learn about KQL to investigate in Microsoft Defender or Sentinel then this article is for you.
👍1
⤷ Title: Azure Sentinel Honeypot Project: A Real-World Cyberattack Simulation
════════════════════════
𐀪 Author: Naushad Alam
════════════════════════
ⴵ Time: Fri, 18 Apr 2025 22:31:41 GMT
════════════════════════
⌗ Tags: #kql_query #geoip #honeypot #cybersecurity #azure_sentinel
════════════════════════
𐀪 Author: Naushad Alam
════════════════════════
ⴵ Time: Fri, 18 Apr 2025 22:31:41 GMT
════════════════════════
⌗ Tags: #kql_query #geoip #honeypot #cybersecurity #azure_sentinel
Medium
Azure Sentinel Honeypot Project: A Real-World Cyberattack Simulation
In today’s evolving cyber threat landscape, it’s crucial to have systems in place that can detect and respond to potential breaches in real…
⤷ Title: Sandfly: Creating Linux Alerts Incidents in Microsoft Azure Sentinel — With KQL Parser buildout
════════════════════════
𐀪 Author: Truvis Thornton
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 17:42:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #siem #sentinel #kql #homelab
════════════════════════
𐀪 Author: Truvis Thornton
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 17:42:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #siem #sentinel #kql #homelab
Medium
Sandfly: Creating Linux Alerts Incidents in Microsoft Azure Sentinel — With KQL Parser buildout
You can find the complete collection of Sandfly related articles here:
⤷ Title: KQL (Kusto): Introduction| TryHackMe Walkthrough
════════════════════════
𐀪 Author: Cyber.Bae
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:12:32 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #kql #cybersecurity #microsoft_sentinel
════════════════════════
𐀪 Author: Cyber.Bae
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:12:32 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #kql #cybersecurity #microsoft_sentinel
Medium
KQL (Kusto): Introduction| TryHackMe Walkthrough
Learning to perform KQL queries in Microsoft Sentinel
⤷ Title: The LOOBins project meets KQL
════════════════════════
𐀪 Author: Sonja Pinzl
════════════════════════
ⴵ Time: Sun, 25 May 2025 13:31:15 GMT
════════════════════════
⌗ Tags: #kql #cybersecurity #loobins #macos #microsoft_sentinel
════════════════════════
𐀪 Author: Sonja Pinzl
════════════════════════
ⴵ Time: Sun, 25 May 2025 13:31:15 GMT
════════════════════════
⌗ Tags: #kql #cybersecurity #loobins #macos #microsoft_sentinel
Medium
The LOOBins project meets KQL
Sentinel lookup query for macOS tools that threat actors love!
⤷ Title: Identifying potential DDoS cases based on ASN with KQL Queries
════════════════════════
𐀪 Author: Sergio Albea
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 11:36:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #ddos #kql #threat_hunting
════════════════════════
𐀪 Author: Sergio Albea
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 11:36:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #ddos #kql #threat_hunting
Medium
Identifying potential DDoS cases based on ASN with KQL Queries
DDoS attacks are among the most widely recognized forms of cyberattacks, familiar to both newcomers and experienced professionals in the…
⤷ Title: Using KQL to Uncover a Phishing Attack in KC7’s ‘A Rap Beef’
════════════════════════
𐀪 Author: The Decryptionist (AMS)
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 19:15:44 GMT
════════════════════════
⌗ Tags: #threat_detection #microsoft_azure #cybersecurity #kql #microsoft_sentinel
════════════════════════
𐀪 Author: The Decryptionist (AMS)
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 19:15:44 GMT
════════════════════════
⌗ Tags: #threat_detection #microsoft_azure #cybersecurity #kql #microsoft_sentinel
Medium
Using KQL to Uncover a Phishing Attack in KC7’s ‘A Rap Beef’
Intro
⤷ Title: Stop Chasing Alerts, Start Spotting Anomalies: The SOC Guide to UEBA and Advanced Threat Detection
════════════════════════
𐀪 Author: Saikat Paul
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 08:44:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #cyber_security_awareness #anomaly_detection #kql
════════════════════════
𐀪 Author: Saikat Paul
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 08:44:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #cyber_security_awareness #anomaly_detection #kql
Medium
Stop Chasing Alerts, Start Spotting Anomalies: The SOC Guide to UEBA and Advanced Threat Detection
Security Operations Centers (SOCs) today face a paradox: more alerts, but less visibility into real threats. While attackers get smarter —…
⤷ Title: AI-Powered Cyber Threats & Deepfake Defense: A 2025 Security Guide
════════════════════════
𐀪 Author: Shivam Mathur
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 10:49:19 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #ai_security #kql #microsoft_defender
════════════════════════
𐀪 Author: Shivam Mathur
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 10:49:19 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #ai_security #kql #microsoft_defender
Medium
AI-Powered Cyber Threats & Deepfake Defense: A 2025 Security Guide
Artificial intelligence is revolutionizing cybersecurity — but not just for the good guys. In 2025, AI is powering smarter phishing scams…