Threat Hunting

KQL Hunt Query Library

60+ Microsoft Sentinel and Defender Advanced Hunting KQL queries covering Windows endpoint, Azure AD, Office 365, and network telemetry.

Coming next

This tool is being built. Return soon — or visit the Threat Hunting hub for all available tools.