Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to add back a deleted Microsoft Sentinel built in query? #255

Open
meetndAI opened this issue Dec 4, 2024 · 0 comments
Open

How to add back a deleted Microsoft Sentinel built in query? #255

meetndAI opened this issue Dec 4, 2024 · 0 comments

Comments

@meetndAI
Copy link

meetndAI commented Dec 4, 2024

Image
Hello! I am learning Microsoft Azure. I downloaded the Microsoft Sentinel Training Lab Solution. Then in MIcrosoft Sentinel, /Hunting ran the built in query 'Adding credentials to legitimate OAuth Applications' with the T1098-Account Manipulation technique. I got 5 results but on clicking the query, couldn't get the results page to pop up. So I clicked on the delete thinking I will reselect and rerun the query but looks like I deleted it from the built-in list :( Now I only see the 5 built-in queries Image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant