Skip to content
This repository was archived by the owner on Nov 16, 2023. It is now read-only.

Pull requests: microsoft/Microsoft-365-Defender-Hunting-Queries

34 Open 366 Closed
34 Open 366 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add modification-of-exefile-shell-open-key.md
#431 opened Nov 19, 2021 by Karneades Loading…
1
Update qakbot-campaign-process-injection.md
#429 opened Nov 9, 2021 by ionsor Loading…
Update insider-threat-detection-queries.md
#428 opened Nov 3, 2021 by sei-nitc Contributor Loading…
Update Airlift 2021 - Lets Invoke.csl
#423 opened Oct 6, 2021 by KustoKing Loading…
Attack Surface Reduction Rules Device Events
#422 opened Oct 1, 2021 by deanpickering Loading…
1
Updated to use the new UsbDriveMounted event
#419 opened Sep 17, 2021 by mjmelone Contributor Loading…
Update Qakbot discovery activies.md
#417 opened Sep 13, 2021 by cbresponse Loading…
Create EarthBaku-APT-41-files-domains.txt
#414 opened Aug 26, 2021 by Phoenix9032 Loading…
Initial commit for rclone hunting queries
#413 opened Aug 20, 2021 by LoZio Loading…
1
ProxyShell.md
#396 opened Aug 9, 2021 by Shivammalaviya Contributor Loading…
Create Processes Created from Files with Non-ASCII Characters.md
#395 opened Aug 4, 2021 by mjmelone Contributor Loading…
Create Ousaban Banking Trojan.md
#393 opened Jul 28, 2021 by Shivammalaviya Contributor Loading…
Create Pulse Secure.md
#388 opened Jul 22, 2021 by Shivammalaviya Contributor Loading…
Create SolarWinds -CVE-2021-35211
#381 opened Jul 14, 2021 by Shivammalaviya Contributor Loading…
2
Update Suspicious Spoolsv Child Process.md
#373 opened Jul 2, 2021 by endisphotic Contributor Loading…
Create Detect-PrintNightmare
#369 opened Jul 1, 2021 by Petitohead Loading…
1
File Creation Statistical Analysis
#352 opened May 25, 2021 by A-dd-Y Loading…
1
Updating to use the new UsbDriveMounted events
#350 opened May 18, 2021 by mjmelone Contributor Loading…
Updated table names in Advanced Hunting section
#334 opened Apr 15, 2021 by woodtechie1428 Loading…
1
Update Open email link.txt
#326 opened Apr 1, 2021 by darioongit Contributor Loading…
2
Create Changes to Antimalware Exclusions.md
#255 opened Dec 11, 2020 by mjmelone Contributor Loading…
Update qakbot-campaign-esentutl.md
#253 opened Dec 9, 2020 by anna-g-arbeiter Loading…
1
added pages related to dudear activity
#209 opened Aug 21, 2020 by martyav Contributor Loading…
1
added 2019-rdp-vulnerabilities
#208 opened Aug 20, 2020 by martyav Contributor Loading…
added font-parsing-vulnerabilities.md
#206 opened Aug 20, 2020 by martyav Contributor Loading…
ProTip! Filter pull requests by the default branch with base:master.