KQL-threat-hunting-queries
✅ Recently maintainedA repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
802Stars
97Forks
+27-day stars
— · MIT · Last push 2026-11-03
Official repository & installation ↗GitValue · Value evidence
Unscored · Evidence coverage 0%
Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.
Star history
2025-09-292026-11-03
View historical data
| Date | Stars |
|---|---|
| 2026-10-05 | 794 |
| 2026-10-06 | 794 |
| 2026-10-07 | 794 |
| 2026-10-08 | 795 |
| 2026-10-09 | 795 |
| 2026-10-10 | 795 |
| 2026-10-11 | 796 |
| 2026-10-12 | 797 |
| 2026-10-13 | 798 |
| 2026-10-14 | 798 |
| 2026-10-15 | 798 |
| 2026-10-16 | 798 |
| 2026-10-17 | 798 |
| 2026-10-18 | 798 |
| 2026-10-19 | 798 |
| 2026-10-20 | 798 |
| 2026-10-21 | 798 |
| 2026-10-22 | 798 |
| 2026-10-23 | 798 |
| 2026-10-24 | 798 |
| 2026-10-25 | 798 |
| 2026-10-26 | 800 |
| 2026-10-27 | 801 |
| 2026-10-28 | 801 |
| 2026-10-29 | 801 |
| 2026-10-30 | 802 |
| 2026-10-31 | 802 |
| 2026-11-01 | 802 |
| 2026-11-02 | 802 |
| 2026-11-03 | 802 |
Get the project
git clone https://github.com/cyb3rmik3/KQL-threat-hunting-queries.gitCloning downloads the source. For dependencies and installation, follow the project README.
Related projects & alternative candidates
Related domains do not imply feature parity. Review official documentation and licenses.