Mirrors/marcredhat-kql
1
0
Fork 0
mirror of https://github.com/marcredhat/kql synced 2026-06-08 13:23:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
23cbaa9c08e081cbfa54c7ec8959f1d4fc78d7b4
marcredhat-kql/kql
T
History
marc 23cbaa9c08 Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
..
01_anomalous_signin_location_increase.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
02_rare_audit_activity_by_app.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
03_azure_rare_subscription_ops.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
04_daily_signin_location_trend.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
05_daily_network_traffic_per_source.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
06_daily_process_execution_trend.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
07_rare_user_agent_by_app.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
08_network_ioc_match.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
09_new_processes_24h.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
10_sharepoint_anomaly.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
11_palo_alto_beacon.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
12_suspicious_windows_logon_off_hours.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
13_insider_threat_sensitive_files.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
14_priv_escalation.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
15_slow_brute_force.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
16_suspicious_travel.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00
17_daily_baseline_new_locations.kql
Initial commit: KQL ↔ SDL PowerQuery proof of equivalence
2026-06-01 09:57:14 +02:00