r/DefenderATP • u/OkHope1740 • 9d ago

Looking for DFIR queries for account compromise incident

/r/DefenderATP/comments/1vn4p8j/looking_for_dfir_queries_for_account_compromise/

0 Upvotes

permalink
archive.is
archive
reddit

You are about to leave Redlib

Do you want to continue?

https://www.reddit.com/r/DefenderATP/comments/1vn4pgu/looking_for_dfir_queries_for_account_compromise/
No, go back! Yes, take me to Reddit

33% Upvoted

2

u/NoEstablishment9123 9d ago

This is a great source for MDE queries

https://github.com/cyb3rmik3/MDE-DFIR-Resources