KQL
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint. (by LearningKijo)
kusto-queries
example queries for learning the kusto language (by tobiasmcvey)
| KQL | kusto-queries | |
|---|---|---|
| 5 | 1 | |
| 397 | 84 | |
| - | - | |
| 9.6 | 0.0 | |
| about 1 month ago | almost 3 years ago | |
| - | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
KQL
Posts with mentions or reviews of KQL.
We have used some of these posts to build our list of alternatives
and similar projects.
kusto-queries
Posts with mentions or reviews of kusto-queries.
We have used some of these posts to build our list of alternatives
and similar projects.
-
I am a software geek in Cloud Security, reducing risk @ exascale. AMA!
Unfortunately I'm not familiar with Kusto, but I phoned a friend and got this which they said was "helpful" - https://github.com/tobiasmcvey/kusto-queries/blob/main/README.md
What are some alternatives?
When comparing KQL and kusto-queries you can also consider the following projects:
Hunting-Queries-Detection-Rules - KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
azure-service-bus - ☁️ Azure Service Bus service issue tracking and samples
azure-kusto-spark - Apache Spark Connector for Azure Kusto
ApplicationInsights-dotnet - ApplicationInsights-dotnet
learning-cloud - Courses, sample code, articles & screencasts - AWS, Azure, & GCP
ApplicationInsights-node.js - Microsoft Application Insights SDK for Node.js
awesomekql - Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs
KQL vs Hunting-Queries-Detection-Rules
kusto-queries vs azure-service-bus
kusto-queries vs azure-kusto-spark
kusto-queries vs ApplicationInsights-dotnet
kusto-queries vs Hunting-Queries-Detection-Rules
kusto-queries vs learning-cloud
kusto-queries vs ApplicationInsights-node.js
kusto-queries vs awesomekql