Community feed
Recent activity
Newest published queries, parsers, dashboards, and how-tos.
- Query@sebastian
Leveraging the aidmaster repo
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
List All ITP Detections
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Listening Programs with low port numbers
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Look for files running outside Windows systems folders with name masquerading
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Map Agent ID values to Host Group Names
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Mean Time to React, Respond, and Resolve
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Merge Legacy AID Master Info
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Merge Parent Child PR2 with Join
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Omit RFC1819 CIDR Ranges from Search
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
PR2 + DNS Cheat Join
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Parse Windows Call Stack
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Percentage of Sensors in RFM
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Percentage of Windows Mac Linux Endpoints
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Process ProcessCreateFlags
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
ProcessRollup2 Curation
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
ProcessRollup2 Files With Mark of the Web
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Profiling IOC and IOA Exclusions in Falcon
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
RFM State by Day
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
RMM Tool Hunting
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Rare and Common Encrypted Command Lines
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…