KQL - Category - Cloudbrothers

KQL

2022

Use UEBA in Microsoft Sentinel to your advantage 09-08

Microsoft Defender for Endpoint Device Health 08-09

Use Unified Sign-In logs in Advanced Hunting 07-11

Why using a FIDO2 security key is important 04-10

Azure Attack Paths 03-22

Detect and alert on unusual high phish or malware email volume 03-07

Current limits of Defender AV Tamper Protection 02-15

Defender for Endpoint - Did the Antivirus scan complete? 01-28

2021

Alert changes to sensitive AD groups using MDI 11-05

Automated response to C2 traffic on your devices 10-18

1
2
3