learn

Query output of Azure PowerShell

The results of each Azure PowerShell cmdlet are an Azure PowerShell object. Even cmdlets that aren't explicitly Get-operations might return a value that can be inspected, to give information about a ...
GitHub

Pre-built KQL query library and PowerShell runner that helps IT admins instantly interrogate their entire Intune fleet during security incidents — no KQL expertise required.

IntuneQueryKit is a curated, battle-tested library of 50+ Device Query KQL templates covering common incident response, vulnerability triage, and compliance scenarios (rogue software, outdated drivers ...
Redmond

PowerShell Desktop AI Revisited, Part 3: Query Processing

The third installment in this PowerShell AI series explores how user queries are processed and answered using a RESTful API and JSON payloads, enabling seamless interaction with local AI models ...
GitHub

Detect_and_Decode_Base64-Encoded_PowerShell_Commands-http.yml

# Description of what the query does and its purpose. description: The query identifies Windows PowerShell executions using encoded commands, extracts and decodes Base64 payloads (including nested ...