XQL query generator.

Quick and dirty hunting tool.

---

- Select dataset:

Network story XDR log data

- Select search filter 1:

Local IP address (connections from) Remote IP address (connections to) Hostname (DNS) Device name (Workstation)

- Enter IP address or hostname:

- Select mode:

Network mode Debug mode

- Select search filter 2:

Username Process name

- Enter value:

Output:

Results..

Sloppy hobby project brought to you by:

@b41ss

Cheers!