Azure Sentinel KQL Hunting Query Library Builder for Insider Threat Scenarios for Security Review Pilot Validation for Service Reliability Review
Builds a library of Microsoft Sentinel KQL threat hunting queries targeting insider threat scenarios including data exfiltration via USB, anomalous SharePoint access, and privilege abuse patterns.