EDR 3.0 - Live Discover & Response: Generic Indicator of Compromise Hunting Query

Inspired by the US IRAN tensions in January, we wanted to build a query to search for the indicators of compromise exhibited by threat actors associated with Iran.
The POWER of Live Discover is only limited by your imagination....