SOC Arsenal

Tactical directory of KQL queries (Threat Hunting) and automation scripts.

SELECT A SCRIPT FROM THE SIDE PANEL

Frequently asked questions

What does the SOC Arsenal contain?

A collection of KQL queries and scripts ready to paste into Microsoft Sentinel and Defender, grouped by tactic.

Can I search by tactic?

Yes, the search filters by tactic, service or keyword.

Is it free and signup-free?

Yes, everything runs in the browser.