GitHub

Pre-built KQL query library and PowerShell runner that helps IT admins instantly interrogate their entire Intune fleet during security incidents — no KQL expertise required.

IntuneQueryKit is a curated, battle-tested library of 50+ Device Query KQL templates covering common incident response, vulnerability triage, and compliance scenarios (rogue software, outdated drivers ...
learn

Query output of Azure PowerShell

The results of each Azure PowerShell cmdlet are an Azure PowerShell object. Even cmdlets that aren't explicitly Get-operations might return a value that can be inspected, to give information about a ...
Redmond

PowerShell Desktop AI Revisited, Part 3: Query Processing

The third installment in this PowerShell AI series explores how user queries are processed and answered using a RESTful API and JSON payloads, enabling seamless interaction with local AI models ...
Ars Technica

Powershell. SQL Query. How to determine if a query returns no results?

I’ve created a script that monitors a table in a SQL Server database. I’m only interested in one column in the table: TimeStamp. If the maximum (newest) value in TimeStamp is more than 30 minutes ...
techzine.nl

PowerShell Trojan ontdekt die DNS-query’s misbruikt

Onderzoekers bij Talos, de onderzoeksgroep van Cisco op het gebied van kwetsbaarheden en bedreigingen van het internet, hebben aangekondigd een nieuwe bron van bedreigingen te onderzoeken. Deze nieuwe ...
GitHub

Detect_and_Decode_Base64-Encoded_PowerShell_Commands-http.yml

# Description of what the query does and its purpose. description: The query identifies Windows PowerShell executions using encoded commands, extracts and decodes Base64 payloads (including nested ...