CQL Hub - CrowdStrike Query Library

Name *

Author *

Description *

CQL Query *

Explanation

MITRE ATT&CK IDs Separate multiple MITRE IDs with commas

Tags

Hunting Monitoring Detection

Select one or more tags that apply to your query

Log Sources

Endpoint Network Identity Cloud Mail Other

Select one or more log sources that apply to your query

Required Modules

Insight Identity Spotlight CSPM / ASPM / DSPM Data Protection IT Automation

Select one or more required modules for your query

YAML Builder