README.md

KQL Threat Hunting

You can use and run those shared queries in Defender XDR/EDR to find any correlated events with IoCs extracted from threat feeds, export vulnerability reports and so on.