Community feed
Recent activity
Newest published queries, parsers, dashboards, and how-tos.
- Query@sebastian
CVE-2025-1146 System Scoping (OsVersionInfo with Logon Data)
The query below will look for Linux systems (Linux, K8, Containers) that need to be updated against CVE-2025-1146. The q…
- Query@sebastian
CVE-2025-1146 System Scoping (OsVersionInfo)
The query below will look for Linux systems (Linux, K8, Containers) that need to be updated against CVE-2025-1146. The q…
- Query@sebastian
CVE-2025-1146 System Scoping (aid master)
The query below will look for Linux systems (Linux, K8, Containers) that need to be updated against CVE-2025-1146. The q…
- Query@sebastian
CVE-2025-42701 and CVE-2025-42706 Falcon Version Scoping (OsVersionInfo)
The following query looks for Falcon Sensor for Windows versions that need to be hotfixed or updated to address CVE-2025…
- Query@sebastian
CVE-2025-42701 and CVE-2025-42706 Falcon Version Scoping (aid master main)
The following query looks for Falcon Sensor for Windows versions that need to be hotfixed or updated to address CVE-2025…
- Query@sebastian
CVE-2025-53770 - SharePoint ToolShell
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Calculate Last Windows Boot Time
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Calculate Process Run Time
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Case to convert Size to appropriate unit of measure
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Check for Falcon AcUninstallConfirmation Event Followed by no Heartbeat Events
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Check for Falcon Analysts Running get Command
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Check for RTR Being Disabled
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Check for Sensors in RFM
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Check for Unsupported Sensors
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Chrome Version Number Evaluation
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
ClickFixHunting
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Combine ProcessRollup2 and FileWritten Events
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Combine ProcessRollup2 and NetworkConnectIP4 Events
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Count Windows Discovery Commands Per User
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Create Heatmap of Login Activity
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
page 1/8 · 143 items