Community feed
Recent activity
Newest published queries, parsers, dashboards, and how-tos.
- Query@sebastian
(T1580) Cloud Infrastructure Discovery
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/MITRE-ATT&CK-En…
- Query@sebastian
(T1614.001) System Location Discovery - System Language Discovery
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/MITRE-ATT&CK-En…
- Query@sebastian
(T1615) Group Policy Discovery
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/MITRE-ATT&CK-En…
- Query@sebastian
(T1652) Device Driver Discovery
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/MITRE-ATT&CK-En…
- Query@sebastian
[T1059.001] NSLookup Remote Payload - Win
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1059.…
- Query@sebastian
[T1087.001] Account Discovery - Local Accounts - Lin
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.…
- Query@sebastian
[T1087.001] Account Discovery - Local Accounts - Mac
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.…
- Query@sebastian
[T1087.001] Account Discovery - Local Accounts - Win
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.…
- Query@sebastian
[T1087.002] Account Discovery - Domain Accounts - Lin
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.…
- Query@sebastian
[T1087.002] Account Discovery - Domain Accounts - Mac
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.…
- Query@sebastian
[T1087.002] Account Discovery - Domain Accounts - Win
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.…
- Query@sebastian
2024-03-01 CQF Live Supporting Queries
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Cool-Query-Frid…
- Query@sebastian
Custom Weighting Command Line and File Name
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
OsVersionInfo OsVersionFileData Decode
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
(T1087.001) Account Discovery - Local Account
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/MITRE-ATT&CK-En…
- Query@sebastian
RDP Login World Map
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Linux Sensors in Kernel Mode, User Mode, and RFM
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Linux Kernel Version
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Hunting EDR Freeze
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…
- Query@sebastian
Firewall Rule Additions
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Que…