Microsoft open sources CodeQL queries used in Solorigate investigation

Microsoft has open sourced the CodeQL queries that it used to identify malicious code implants from the Solorigate attack. CodeQL is an analysis engine used for code inspection, among other things. Read more…
Neowin