main
Azure-Sentinel
Repository badge with A rating
View on GitHub
Grade
Name
Complexity
Churn
Issues
A
Hunting Queries\OfficeActivity\nonowner_MailboxLogin.yaml
 6 -
A
Detections\AzureDiagnostics\MaliciousWAFSessions.yaml
 6 -
A
Hunting Queries\GitHub\Oauth App Restrictions Disabled.yaml
 6 -
A
Hunting Queries\MultipleDataSources\SolarWindsInventory.yaml
 6 -
A
Detections\QualysVM\HighNumberofVulnDetected.yaml
 6 -
A
DataConnectors\Netskope\AzureFunctionNetskope\run.ps1
 6 -
A
Hunting Queries\OfficeActivity\AnomolousUserAccessingOtherUsersMailbox.yaml
 6 -
A
Hunting Queries\DnsEvents\DNS_CommonlyAbusedTLDs.yaml
 6 -
A
Exploration Queries\InputEntity_Account\UserAccount_ResourceLogon.yaml
 6 -
A
.script\tests\detectionTemplateSchemaValidation\Models\AttackTactic.cs
 6 -
A
Hunting Queries\SigninLogs\SuccessfulAccount-SigninAttemptsByIPviaDisabledAccounts.yaml
 6 -
A
Hunting Queries\OfficeActivity\OfficeMailForwarding_hunting.yaml
 6 -
A
Exploration Queries\InputEntity_File\HostwithFile.yaml
 6 -
A
Detections\AzureDevOpsAuditing\ADOPATUsedWithBrowser.yaml
 6 -
A
Detections\AzureDevOpsAuditing\ADOPipelineModifiedbyNewUser.yaml
 6 -
A
Hunting Queries\AzureActivity\PortOpenedForAzureResource.yaml
 6 -
A
Hunting Queries\AzureDiagnostics\WAF_log4j_vulnerability.yaml
 6 -
A
Exploration Queries\InputEntity_Account\UserAccount_LogonsFromIPAddress.yaml
 6 -
A
Hunting Queries\BehaviorAnalytics\Anomalous AAD Account Manipulation.yaml
 6 -
A
Detections\PulseConnectSecure\PulseConnectSecureVPN-BruteForce.yaml
 6 -