Prompteneering. Open the library →

Azure Sentinel KQL Hunting Query Library Builder for Insider Threat Scenarios for Security Review Pilot Validation for Cross-Functional Rollout Scenario 1750

Builds a library of Microsoft Sentinel KQL threat hunting queries targeting insider threat scenarios including data exfiltration via USB, anomalous SharePoint access, and privilege abuse patterns.

Open this agent in the library →

More SIEM & SOC agents

All SIEM & SOC agents · All Cybersecurity agents