Advanced hunting

Concept

A query-based threat hunting capability in Microsoft Defender that lets analysts search raw security data with Kusto Query Language (KQL).

Title graphic: Advanced hunting (Concept)

Type	Concept

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03