Microsoft-365-Defender-Hunting-Queries VS Hunting-Queries-Detection-Rules

Compare Microsoft-365-Defender-Hunting-Queries vs Hunting-Queries-Detection-Rules and see what are their differences.


Sample queries for Advanced hunting in Microsoft 365 Defender (by microsoft)


Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules. (by Bert-JanP)
Our great sponsors
  • SonarQube - Static code analysis for 29 languages.
  • InfluxDB - Build time-series-based applications quickly and at scale.
  • SaaSHub - Software Alternatives and Reviews
Microsoft-365-Defender-Hunting-Queries Hunting-Queries-Detection-Rules
14 6
1,408 310
- -
9.0 7.5
12 months ago 7 days ago
Jupyter Notebook
MIT License -
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.


Posts with mentions or reviews of Microsoft-365-Defender-Hunting-Queries. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-06-15.


Posts with mentions or reviews of Hunting-Queries-Detection-Rules. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-12-11.

What are some alternatives?

When comparing Microsoft-365-Defender-Hunting-Queries and Hunting-Queries-Detection-Rules you can also consider the following projects:

Azure-Sentinel - Cloud-native SIEM for intelligent security analytics for your entire enterprise.

h4cker - This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

security-onion - Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

HELK - The Hunting ELK

chatgpt-raycast - ChatGPT raycast extension

hid-examples - Examples to accompany the book "Haskell in Depth"

AzureHunter - A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365