KQL

These are queries I mainly use while working with Microsoft Sentinel

Name		Name	Last commit message	Last commit date
Latest commit History 17 Commits
Click Events		Click Events
Failed Okta logins		Failed Okta logins
Failed Sign In		Failed Sign In
Failed Windows Login		Failed Windows Login
Hunt for Hardware Devices		Hunt for Hardware Devices
Hunt for Suspicious Commands		Hunt for Suspicious Commands
Hunt for Suspicious Network Events		Hunt for Suspicious Network Events
Lookup Email Attachments		Lookup Email Attachments
Lookup Url Clicks		Lookup Url Clicks
MFA-User-Blocked		MFA-User-Blocked
PA Sign in Failures		PA Sign in Failures
RDP's		RDP's
README.md		README.md
Sign Ins from outside a location		Sign Ins from outside a location
Visual Help		Visual Help

Provide feedback