Learn Live - Introduction to Kusto Query Language https://rodtrent.com/9mh
View my verified achievement from Microsoft Azure Data Explorer.
https://www.credly.com/badges/93244571-f2fc-4602-bc0d-7d605400b785/public_url
Was quick enough this time to capture a gift!
Kusto Detective Agency Season 2, Case 3 is ready!
DCA-DetectAADInternalsUse.kql - Detect AADInternals use, where we see a domain changed from managed to federated, and the issuer contains any.sts or the issuer suffix is 8 characters, a combination of letters and numbers
#MicrosoftDefender #Security #MicrosoftSecurity #Cybersecurity #M365D #KQL #MustLearnKQL
KQL Queries Behind the Microsoft Sentinel Overview Page https://rodtrent.com/web
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL
Email-EOP-Detection-DailyPercentage.yaml - This query shows the daily percentage of EOP detections.
#KQL #MustLearnKQL #MicrosoftDefender #Security #MicrosoftSecurity #Cybersecurity #M365D
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint. - KQL/KQL-XDR-Hunting/Email-Microsoft-Defender-for-Office365/Ema...
Saas-Ransomware-0mega-hunting.kql - Detection Queries for 0mega ransomware infecting sharepoint. https://rodtrent.com/m80
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL
Did you know Kindle Unlimited subscribers can read Must Learn KQL for free?
AzureTracks
rodtrent 
