KQL Search

Benjamin ZulligerNov 10, 2026

Benjamin ZulligerNov 9, 2026

Sergio AlbeaNov 5, 2026

Michalis MichalosNov 2, 2026

Alex VerboonNov 2, 2026

Steven LimNov 1, 2026

Alex VerboonOct 31, 2026

David AlonsoOct 29, 2026

Nathan HutchinsonOct 28, 2026

Sergio AlbeaOct 28, 2026

David AlonsoOct 27, 2026

Alex VerboonOct 23, 2026

Our Sponsors ❤️

Agent MCP Server Endpoints Matching Threat Intel

AI Agent MCP Server Usage Inventory

AI Agent Security Risk Inventory With Owner Attribution

DLL Hijacking Via Print Spooler WBEM And WER Paths

Group Policy Object Abuse Via Offensive Tools And Script Execution

Reverse Shell Spawned From Vulnerable React Server Components

Identify Nodejs Installed Versions With Queries To Patch On Novembrer 11 HIGH Severity Nodejs Vulnerabilities

Hunting For Suspicious Client Secret Authentication Attempts

Tifcepillar3 Data

Tifcepillar4 Data

Tifcepillar1 Data

Tifcepillar2 Data

MDE Schedulted Tasks

MDE Scheduled Task Created

Successful Php2shell Indicator Scan

WLAPS Password Recovery Admin Logon Audit

MDE Onboarding Offboarding Package Downloads

Custom Agent Inline Content

Custom Agent Inventory Disabled

Custom Agent Inventory

Custom Agent Protected Content

Custom Agent Spans

Custom Command Capable Mcp Tool Invocation

Custom Excessive Tool Calls

Custom Explicit Guardrail Block

Custom Exploit Intent Mcp Command Chain

Custom Guardrail Evaluation Unavailable

Custom Internal Network Tool Target

Custom Prompt Injection Attempt

Custom Prompt Injection Tool Chain

Custom Secret Shaped Output

Custom Secrets In Tool Arguments

Custom Secrets In Tool Result

Custom Secrets In User Input

Custom System Prompt Disclosure

Custom Token Usage Spike

Custom Tool Failure Storm

Custom Tool Result Instruction Injection

Custom Tool Result Risky Output Chain

Custom Unapproved Mcp Server Execution

Custom Unsafe Active Content Output

Confirm Successful Device Onboarding To MDE By Device Name

Php2shell Review PHP Versions Selected In Our Applications

Alerts Behaviors Queries

Apps Identity Queries

Graph Tables

Identity Investigation Queries

MDE Endpoint Queries

MDO BEC Ai TM Queries

MDE Azure VM MDE Onboarding

Our Sponsors