Steven Lim
LightNews LightNews
banner
stevenlim.bsky.social
Steven Lim
@stevenlim.bsky.social
400 followers 290 following 41 posts
#Cybersecurity #Sentinel #DefenderXDR #KQL #Azure #M365 #KQLWizard

https://detections.ai/user/KQLWizard
Posts Replies Media Videos
stevenlim.bsky.social
github.com/SlimKQL/Hunt...
January 3, 2025 at 12:11 PM
stevenlim.bsky.social
Custom detection code:
github.com/SlimKQL/Hunt...
January 1, 2025 at 9:38 AM
stevenlim.bsky.social
Custom detection code:
github.com/SlimKQL/Hunt...
January 1, 2025 at 9:35 AM
stevenlim.bsky.social
Thanks! :) The threat actor social engineering attacks are targeting normal business users, uers with role are technical in nature and tend not to follow these type of instruction, hence I exclude this group of privilege roles users.
December 17, 2024 at 7:28 AM
stevenlim.bsky.social
www.proofpoint.com/us/blog/thre...
Clipboard to Compromise: PowerShell Script Self-Pwn | Proofpoint US
Proofpoint observed an increase in threat actors directing users to copy and paste malicious Powershell script malware onto their computers. Learn more.
www.proofpoint.com
December 17, 2024 at 5:55 AM
stevenlim.bsky.social
Thank you! 😄🙏
December 7, 2024 at 9:11 AM
stevenlim.bsky.social
github.com/SlimKQL/Hunt...
December 2, 2024 at 6:01 AM
stevenlim.bsky.social
github.com/SlimKQL/Hunt...
December 1, 2024 at 12:38 PM
stevenlim.bsky.social
Hunting Rockstar 2FA:
github.com/SlimKQL/Hunt...
Hunting-Queries-Detection-Rules/Sentinel/Hunting Rockstar 2FA.kql at main · SlimKQL/Hunting-Queries-Detection-Rules
KQL Queries. Microsoft Defender, Microsoft Sentinel - SlimKQL/Hunting-Queries-Detection-Rules
github.com
November 29, 2024 at 5:30 PM
stevenlim.bsky.social
KQL Code:
github.com/SlimKQL/Hunt...
Hunting-Queries-Detection-Rules/DefenderXDR/Social Engineering Attack Monitor - Teams & Emails.kql at main · SlimKQL/Hunting-Queries-Detection-Rules
KQL Queries. Microsoft Defender, Microsoft Sentinel - SlimKQL/Hunting-Queries-Detection-Rules
github.com
November 29, 2024 at 8:47 AM