leftanti

leftanti — detection engineering notes

Detection engineering, KQL, and threat hunting notes for Microsoft Sentinel and Defender. Everything here is written to be copied, adapted, and tuned against your own data.

everything, newest first