Advanced Hunting | LindenSec

Detecting ManualFinder/PDF Editor Malware Campaign with KQL

The ManualFinder and PDF Editor malware campaign represents a chain attack that turns legitimate-looking applications (well, I guess..)...

Damien van der Linden

2 days ago7 min read

KQL your way into Google's Open Redirect 'feature' that's being abused for phishing.

Damien van der Linden

Dec 5, 20244 min read

The first KQL query I share on here! Lets have a look at B64 encoded UPNs!

Damien van der Linden

Oct 14, 20242 min read