Copilot for Security Prompt of the Day: Create a KQL query to detect all of the following:
1. browsers spawning the Windows Scripting Host (wscript.exe) process
2. running the whoami command and redirecting the output to a file
3. domain trust discovery checks with nltest and related commands
https://github.com/rod-trent/Copilot-for-Security/blob/main/Prompts/Plugins/NL2KQL.md
Share this post
Copilot for Security Prompt of the Day: Create a KQL query to detect all of the following...
Share this post
Copilot for Security Prompt of the Day: Create a KQL query to detect all of the following:
1. browsers spawning the Windows Scripting Host (wscript.exe) process
2. running the whoami command and redirecting the output to a file
3. domain trust discovery checks with nltest and related commands
https://github.com/rod-trent/Copilot-for-Security/blob/main/Prompts/Plugins/NL2KQL.md