chainguard-dev/osquery-defense-kit

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

KQL Queries. Microsoft Defender, Microsoft Sentinel

MCP to help Defenders Detection Engineer Harder and Smarter

Main Sigma Rule Repository

Built-in Panther detection rules and policies

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Splunk Security Content