Microsoft Sentinel - the whys of KQL

• awesome-kql-sentinel

  2 180 0.0

  A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

This should get you started - including some additional insight into threat hunting use cases: https://github.com/reprise99/awesome-kql-sentinel

• blue-teaming-with-kql

  1 187 10.0

  Repository with Sample KQL Query examples for Threat Hunting

Also: - https://threathunt.blog/tag/kql/ - MDE-specific: https://learn.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-query-language?view=o365-worldwide - https://github.com/ashwin-patil/blue-teaming-with-kql

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project