Repo containing threat hunting queries such as:
- Advanced Hunting Queries (365 Defender KQL)
- YARA Rules
- Sigma Rules
Please keep in mind the AH queries may give you FP's depending on your environment. As these have been modified to suit my environment you may need to play around with the query to optimise your results.