invictus-ir/kql_queries

KQL queries for Incident Response