Threat-Hunting-and-Detection

Jupyter Notebook

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

Last updated Jul 10, 2026

816

Stars

112

Forks

Issues

Stars/day

Attention Score

View on GitHub ↗ Open in github.dev

Topics

#cybersecurity #defender-for-endpoint #detection-engineering #dfir #kql #kusto-language #microsoft-sentinel #threat-detection #threat-hunting

Language breakdown

Jupyter Notebook 100.0%

▸ Files click to expand

README

Threat Hunting and Detection

Repository for threat hunting and detection queries, tools, etc.

Quick Links

Blu Raven Academy Home - https://academy.bluraven.io

Blu Raven Academy Courses - https://academy.bluraven.io/courses

Blu Raven Academy Pricing - https://academy.bluraven.io/pricing

Blu Raven Academy Blog - https://academy.bluraven.io/blog

Learn Kusto Query Language (KQL)

If you want to elevate your threat hunting, detection engineering, and incident response skills using KQL, check out my KQL courses!

Warning!

Whatever you use from the repository, double check its correctness, test it in your environment. Please, DO NOT just copy and paste.

Presenting it as your own is illegal and forbidden. Apart from that, you can use the content anyway you like with a reference to @Cyb3rMonk (Twitter) or Cyb3r-Monk (Github). It is much appreciated.

🔗 More in this category