KQL
KQL queries for Advanced Hunting
Install / Use
/learn @wortell/KQLREADME
KQL queries
This repository contains KQL queries for advanced hunting in Microsoft Defender ATP and Azure Sentinel.
Source: https://github.com/Neo23x0/sigma/tree/master/rules
Wortell Enterprise Security
Creating a safer world, one organization at a time_
Related Skills
healthcheck
345.4kHost security hardening and risk-tolerance configuration for OpenClaw deployments
node-connect
345.4kDiagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps
prose
345.4kOpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
frontend-design
104.6kCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.
Security Score
Audited on Mar 13, 2026