Advanced Hunting
Query Defender telemetry with KQL. Results can be saved as hunts, detections, scheduled hunts or automation triggers.
🤖 AI Query Assistant
Describe what you're looking for in plain English and the AI will write the KQL for you - e.g. "processes that connect to a suspicious external IP in the last 7 days".
KQL query
Saved queries 7
| Name | Type | Runs | |
|---|---|---|---|
| re | automation | 0 | |
| test | automation | 0 | |
| Encoded PowerShell Execution | hunt | 0 | |
| LSASS Access | hunt | 0 | |
| SMB Lateral Movement | hunt | 0 | |
| New Scheduled Tasks | detection | 0 | |
| Top Processes | hunt | 0 |
Results
📊
Run a query to see results.