search

Bert-JanP / Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
https://kqlquery.com
BSD 3-Clause "New" or "Revised" License
1.14k stars 213 forks source link

Change principle to principal CloudPersistenceActivityByUserAtRisk.md #5

Closed ep3p closed 1 year ago

ep3p commented 1 year ago

I don't know the correct value, but "principle" should not be correct

Bert-JanP commented 1 year ago

Thanks for mentioning this. I have updated the PersistenceEvents with the proper service principal Operations.