About

This book is a place for all kinds of content related to threat hunting and detection.

Contents

This book contains guides that you can apply with your tools. In addition, It contains detection content for Azure Sentinel and Microsoft 365 Defender suite. Many of the detection content can also be converted to Splunk queries since KQL and SPL are quite similar. Detection content is published on GitHub:

GitHub - Cyb3r-Monk/Threat-Hunting-and-Detection: Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).GitHub

Warning This book is created by @Cyb3rMonk Cloning it AND presenting it as your own is illegal and forbidden. If you do so, it might have an impact on your career. Please don't do it. Cloning, using, giving credits, and referencing is OK and much appreciated.

Want to Support?

If you like my work, have benefited from it, and want to show appreciation, you can buy me a coffee.

Social