Account Enabled (Microsoft Defender for Identity)
CQL · Falcon Next-Gen SIEMCopy query
Loading query…account_enabled_microsoft_defender_for_identity.yml
Detection
Identity
Identity
Loading query…Our Managed SIEM team operates CrowdStrike Falcon Next-Gen SIEM in production, with over 350 battle-tested use cases and 24/7 incident response behind them.