Skip to main content
Defender Advanced Hunting Query App by GoAhead app icon

Defender Advanced Hunting Query App by GoAhead

API wrapper tool for Microsoft Defender Advanced Hunting. Advanced Hunting uses Kusto Query Language (KQL) and the KQL is passed as kql="" on "defkqlg" or "defkqls" custom search command. defkqls StreamingCommand has an unique KQL converter for reducing the query amount against the API quotas limit! Developed by "Tatsuya Hasegawa" in 'GoAhead Inc'.Built by GoAhead Dev Team
splunk product badge
Default Version 1.4.0

April 25, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(1)

Log in to rate this app

Support
Not Supported
Ranking

#35 in Investigative

API wrapper tool for Microsoft Defender Advanced Hunting. Advanced Hunting uses Kusto Query Language (KQL) and the KQL is passed as kql="" on "defkqlg" or "defkqls" custom search command. defkqls StreamingCommand has an unique KQL converter for reducing the query amount against the API quotas limit! Developed by "Tatsuya Hasegawa" in 'GoAhead Inc'. Enjoy deep dive hunting !