SIEM Canned Queries
planned
J
James Stull
I lik the idea of canned queries, but even better is if we had a community share of queries for all huntress clients. Then we can share various queries with eachother.
Chris Bisnett
planned
We added a few example queries to the dashboard last week, but we're going to expand upon this to give some common queries for things like you pointed out as well as providing some additional examples within the dashboard to make it easy to find what you're looking for without needing to memorize the ES|QL syntax.