Blog Post

Microsoft Defender for Endpoint Blog
3 MIN READ

Hunting for network signatures in Microsoft Defender for Endpoint

Christos_Ventouris's avatar
Christos_Ventouris
Icon for Microsoft rankMicrosoft
May 27, 2022
Security researchers Meitar Pinto and Thiago Marques also contributed to this post.   As we continue to evolve our Microsoft 365 Defender capabilities to enable security teams to analyze enriched...
Updated Jun 16, 2022
Version 2.0
microsoft defender for endpoint
0xThiebaut's avatar
0xThiebaut
Copper Contributor
Jun 01, 2022

Great quick post Christos_Ventouris ! Definitely learnt about the network signatures being logged now.

Seems there is a small typo in the first 2 KQL queries where SignatureSampleContent most likely should have been SamplePacketContent as used in the latter queries.