Azure Sentinel KQL Hunting Query Library Builder for Insider Threat Scenarios for Security Review Pilot Validation for Service Reliability Review Scenario 1210
Builds a library of Microsoft Sentinel KQL threat hunting queries targeting insider threat scenarios including data exfiltration via USB, anomalous SharePoint access, and privilege abuse patterns.