How to add back a deleted Microsoft Sentinel built in query? #255
Open
Description
Hello! I am learning Microsoft Azure. I downloaded the Microsoft Sentinel Training Lab Solution. Then in MIcrosoft Sentinel, /Hunting ran the built in query 'Adding credentials to legitimate OAuth Applications' with the T1098-Account Manipulation technique. I got 5 results but on clicking the query, couldn't get the results page to pop up. So I clicked on the delete thinking I will reselect and rerun the query but looks like I deleted it from the built-in list :( Now I only see the 5 built-in queries
Metadata
Assignees
Labels
No labels