KQL Query Builder

Paste indicators below: domains, URLs, IPs, hashes, filenames, or email addresses, one per line or however they come off a ticket. Live or defanged (hxxp://, evil[.]tk) both work.