Repository for threat hunting and detection queries, tools, etc.

If you want to elevate your threat hunting, detection engineering, and incident response skills using KQL, check out my KQL courses!

Whatever you use from the repository, double check its correctness, test it in your environment. Please, DO NOT just copy and paste.

Presenting it as your own is illegal and forbidden. Apart from that, you can use the content anyway you like with a reference to @Cyb3rMonk (Twitter) or Cyb3r-Monk (Github). It is much appreciated.

If you like my work, have benefited from it, and want to show appreciation, pay it forward