Create SQL Detections for Snowflake with MonteAI

Quickly create SQL queries using the Anvilogic low-code SQL builder for Snowflake

Create SQL Queries

• Navigate to the left navigation panel -> click search

  • Select Snowflake and PROCEED

• Drag GATHER DATA component from the right components list

• Select avl_get_snowflake_data_edr or other available data source (will vary based on your environment)

• Drag Code Block or Filter component from the right components list to begin building queries

--example
process_name = 'cmd.exe'

Ensure your Time Picker is at least last 24 hours