Azure Sentinel KQL Hunting Query Library Builder for Insider Threat Scenarios for Security Review Pilot Validation for Governance Audit Prep Scenario 0850
Builds a library of Microsoft Sentinel KQL threat hunting queries targeting insider threat scenarios including data exfiltration via USB, anomalous SharePoint access, and privilege abuse patterns.