Defender Scout KQL

SubagentDev tools

Lets your agent write, check, and improve KQL queries for hunting threats in Microsoft Defender security data.

Generates, validates, and optimizes KQL queries for Microsoft Defender XDR Advanced Hunting across Endpoint, Identity, Office 365, Cloud Apps, and Identity.

Delivery for this kind is on the roadmap — not serving yet. You can still add it. It stays paused until ahel can serve it.