Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

Collection of KQL queries

Rapidly Search and Hunt through Windows Forensic Artefacts