reprise99/Sentinel-Queries issues and pull requests

#32 - Group name occasionally null

Issue - State: open - Opened by jreyes4949 6 months ago

#31 - Licensing Policy for the repository

Issue - State: closed - Opened by Shashankwer 10 months ago - 1 comment

#30 - Update Identity-DetectingFirstTimeAccesstoAzureManagement.kql

Pull Request - State: open - Opened by Bert-JanP about 1 year ago

#29 - Update Identity-SummarizeSuspiciousIPAddresses.kql

Pull Request - State: closed - Opened by xg5-simon about 1 year ago

#28 - Update Identity-PotentialAiTM.kql

Pull Request - State: closed - Opened by Bert-JanP about 1 year ago

#27 - Create Device-DetectInvalidCertificates.kql

Pull Request - State: closed - Opened by xg5-simon over 1 year ago

#26 - Query no longer works

Issue - State: closed - Opened by cchambers-cap over 1 year ago - 6 comments

#25 - Update OfficeActivity-DetectFullMailboxAccess.kql

Pull Request - State: closed - Opened by dstreefkerk over 1 year ago - 1 comment

#24 - Interchange difference times in Identity-SSPRfollowedbyRiskySignin.kql

Pull Request - State: open - Opened by ep3p almost 2 years ago - 1 comment

#23 - Update Identity-MuiltipleConditionalAccessFailures

Pull Request - State: closed - Opened by xg5-simon almost 2 years ago

#22 - ntlm needs to be none case sensitive

Pull Request - State: closed - Opened by Gareth-Rouse almost 2 years ago

#21 - Create officeactivity-purviewsendasaudit.kql

Pull Request - State: open - Opened by jongross4 almost 2 years ago

#20 - Question about passwordless phone sign-in credential in Audit-MFAChangesforPrivlegedUsers.kql

Pull Request - State: open - Opened by ep3p almost 2 years ago

#18 - Azure queries

Issue - State: open - Opened by dazeez about 2 years ago

#17 - Help

Issue - State: closed - Opened by ghost about 2 years ago - 1 comment

#16 - Comparison vs. Assigment

Issue - State: closed - Opened by ghost over 2 years ago - 3 comments

#15 - Suggestion

Issue - State: open - Opened by anfokaboom over 2 years ago

#14 - Update Device-msdtPotentialExploit.kql

Pull Request - State: closed - Opened by ulf78 over 2 years ago - 3 comments

#13 - filter out legitimate Telemetry traffic to avoid false posiitves

Issue - State: closed - Opened by ulf78 over 2 years ago - 2 comments

#12 - Sentinel-Queries/Azure Active Directory/Identity-AADRiskEventCorrelation.kql

Issue - State: closed - Opened by hitem over 2 years ago - 2 comments

#11 - Update Identity-SummarizeGuestTenantActivity.kql

Pull Request - State: closed - Opened by grbray over 2 years ago - 5 comments

#10 - Suggestion: changes to /Active Directory/SecurityEvent-IACFlagParser.kql

Issue - State: closed - Opened by sshockley over 2 years ago - 1 comment

#9 - Identity-SummarizeAppUsageMonthonMonth.kql - update percent change formula

Pull Request - State: closed - Opened by h0ffayyy almost 3 years ago - 1 comment

#8 - Use ActivityDateTime when available in Identity-RiskEventfollowedbyMFAchanges.kql

Pull Request - State: closed - Opened by ep3p almost 3 years ago - 2 comments

#7 - Limit time range in second table Office-DownloadsfromGuestafterAddedtoTeams.kql

Pull Request - State: closed - Opened by ep3p almost 3 years ago

#6 - updated updated issues

Issue - State: closed - Opened by qaautomateio about 3 years ago

#5 - issue updated