Bert-JanP / Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
https://kqlquery.com
BSD 3-Clause "New" or "Revised" License
1.14k stars 213 forks source link

Create nf_ransomware_leaksite_monitoring.md #45

Closed m4nbat closed 2 months ago

m4nbat commented 2 months ago

Hello, I wrote a query to look at the ransowmare.live website and perform some detection's based on lists. Hopefully its format is correct :)

Bert-JanP commented 2 months ago

Merged! Some small changes in the format, but I will solve that for you :P. Very interesting query, gave me some ideas! Thanks (again :D)