By accessing or using kql.cat, you agree to be bound by these Terms of Service. If you do not agree, do not use this service.
kql.cat provides KQL query snippets for use with Microsoft Sentinel and related security tooling. Access to queries requires authentication. You may use the content for lawful security monitoring, detection engineering, and research purposes only.
You may not use this service for any unlawful purpose, including but not limited to unauthorized access to computer systems, circumventing security controls, or facilitating attacks against third parties.
All content on kql.cat — including KQL queries, descriptions, and site design — is the intellectual property of kql.cat and its contributors. You may use individual queries in your own environment but may not redistribute, resell, or republish the content of this platform in bulk without explicit written permission.
All queries and content are provided "as is" without warranty of any kind. kql.cat does not guarantee that any query will produce accurate results in your specific environment. You are responsible for validating any content before deploying it in production.
kql.cat shall not be liable for any damages arising from the use or inability to use this service, including but not limited to missed detections, false positives, or security incidents.
These terms may be updated at any time. Continued use of the service constitutes acceptance of the revised terms.