Create Detect_Known_RAT_RMM_Process_Patterns.md

Bert-JanP / Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

https://kqlquery.com

BSD 3-Clause "New" or "Revised" License

1.14k stars 213 forks source link

Create Detect_Known_RAT_RMM_Process_Patterns.md #23

Closed inodee closed 7 months ago

inodee commented 7 months ago

New hunting KQL query

Bert-JanP commented 7 months ago

Great query man!