#mustlearnkql — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #mustlearnkql, aggregated by home.social.
-
DCA-DetectAADInternalsUse.kql - Detect AADInternals use, where we see a domain changed from managed to federated, and the issuer contains any.sts or the issuer suffix is 8 characters, a combination of letters and numbers
#MicrosoftDefender #Security #MicrosoftSecurity #Cybersecurity #M365D #KQL #MustLearnKQL
-
Email-EOP-Detection-DailyPercentage.yaml - This query shows the daily percentage of EOP detections.
#KQL #MustLearnKQL #MicrosoftDefender #Security #MicrosoftSecurity #Cybersecurity #M365D
-
What’s New in Kusto – Build 2023 ! https://rodtrent.com/k60
-
If you are a QRadar user that needs to learn KQL now that IBM has adopted it for security analytics and threat hunting, get started with the Must Learn KQL series: https://aka.ms/MustLearnKQL
-
If you are a QRadar user that needs to learn KQL now that IBM has adopted it for security analytics and threat hunting, get started with the Must Learn KQL series: https://aka.ms/MustLearnKQL
-
If you are a QRadar user that needs to learn KQL now that IBM has adopted it for security analytics and threat hunting, get started with the Must Learn KQL series: https://aka.ms/MustLearnKQL
-
If you are a QRadar user that needs to learn KQL now that IBM has adopted it for security analytics and threat hunting, get started with the Must Learn KQL series: https://aka.ms/MustLearnKQL
-
If you are a QRadar user that needs to learn KQL now that IBM has adopted it for security analytics and threat hunting, get started with the Must Learn KQL series: https://aka.ms/MustLearnKQL
-
I'll be bringing signed Must Learn KQL books to MMSMOA as session SWAG. But if you have your own physical copy and want it signed, bring it along.
-
Once you have the MDTI Connector and Solution working, this will show the TI only from the MDTI connector https://rodtrent.com/w2w
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #MicrosoftDefender #MDTI #MustLearnKQL #KQL
-
Prepping for #MSSecure tomorrow, just now able to distribute the weekend's Must Learn KQL certificates. Congratulations all!
-
Guided project - Analyze logs in Azure Monitor with KQL https://rodtrent.com/v27
-
How to use Azure Kusto Query Language (KQL) queries to better secure and govern Azure Arc-enabled servers https://rodtrent.com/f1c
-
Want a 2023 New Year's resolution that's easy to keep?
Understanding KQL is a necessary skill for cloud, security, and data science workers. Easiest way to get started is here:
#MustLearnKQL #KQL #MicrosoftSentinel #Defender #ny2023 #happynewyear
-
KQL Query – Who removed Azure Monitoring Agent Extension https://rodtrent.com/o6q