#mustlearnkql — Public Fediverse posts

Learn Live - Introduction to Kusto Query Language https://rodtrent.com/9mh

#MustLearnKQL #KQL

View my verified achievement from Microsoft Azure Data Explorer.

https://www.credly.com/badges/93244571-f2fc-4602-bc0d-7d605400b785/public_url

#MustLearnKQL #KQL

Was quick enough this time to capture a gift!

Kusto Detective Agency Season 2, Case 3 is ready!

https://rodtrent.com/1cr

#MustLearnKQL #KQL

DCA-DetectAADInternalsUse.kql - Detect AADInternals use, where we see a domain changed from managed to federated, and the issuer contains any.sts or the issuer suffix is 8 characters, a combination of letters and numbers

https://rodtrent.com/9li

#MicrosoftDefender #Security #MicrosoftSecurity #Cybersecurity #M365D #KQL #MustLearnKQL

KQL Queries Behind the Microsoft Sentinel Overview Page https://rodtrent.com/web

#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL

Email-EOP-Detection-DailyPercentage.yaml - This query shows the daily percentage of EOP detections.

https://rodtrent.com/2cr

#KQL #MustLearnKQL #MicrosoftDefender #Security #MicrosoftSecurity #Cybersecurity #M365D

Saas-Ransomware-0mega-hunting.kql - Detection Queries for 0mega ransomware infecting sharepoint. https://rodtrent.com/m80

#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL

Did you know Kindle Unlimited subscribers can read Must Learn KQL for free?

https://amzn.to/43uDfsI

#MustLearnKQL #KQL

Probably my favorite Must Learn KQL quote to date.

https://aka.ms/MustLearnKQL

#MustLearnKQL #KQL

Getting GEO Information for IP Addresses without Using a Microsoft Sentinel Playbook https://rodtrent.com/iz5

#MustLearnKQL #KQL #MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security

Love the new geo_info_from_ip_address() function https://rodtrent.com/iue

#MustLearnKQL #KQL

General availability: New KQL function to enrich your data analysis with geographic context https://rodtrent.com/hba

#MustLearnKQL #KQL

5 Signs that You're a Must Learn KQL Addict https://rodtrent.com/bvv

#MustLearnKQL #KQL #MicrosoftSentinel #MicrosoftDefender

And the beat goes on. Almost 2 years after starting the Must Learn KQL series and I just finished delivering certificates for the latest completions for the first day of June 2023.

Congrats all!

https://aka.ms/MustLearnKQL

#MustLearnKQL #KQL #MicrosoftSentinel #MicrosoftDefender

Spent some time today moving the Must Learn KQL learning series off of the old blogs (don't trust them to stick around). The move won't affect anything. All links still available at: https://aka.ms/MustLearnKQL

#MustLearnKQL #KQL

Easy Way to Build KQL Query Templates for Azure Services https://rodtrent.com/ucr

#MustLearnKQL #KQL #Azure

Just getting started to get started learning KQL? Start here: https://aka.ms/MustLearnKQL

Now over 3,000 served!

#MustLearnKQL #KQL

Understanding the Intricacies of AAD Sign-In Logs to Detect MFA Fatigue Attacks https://rodtrent.com/7mn

#Security #MicrosoftSecurity #Cybersecurity #MustLearnKQL #KQL

Case 1 in the books! https://www.credly.com/badges/efa97e16-4976-41c9-8611-55d9fa829827/public_url

Season 2 is shaping up to be epic. https://rodtrent.com/4b6

#MustLearnKQL #KQL

Kql detective part 3 https://rodtrent.com/sj3

#MustLearnKQL #KQL

Introducing Kusto Detective Agency Season 2: Bigger, Better, and Brimming with Prizes! https://rodtrent.com/hwh

#MustLearnKQL #KQL

What’s New in Kusto – Build 2023 ! https://rodtrent.com/k60

#MustLearnKQL #KQL #Kusto #MSBuild

Kusto Detective Agency - Season 2 trailer https://rodtrent.com/p9o

#MustLearnKQL #KQL

Kusto Detective Agency Season 2 is live! https://detective.kusto.io/

#MustLearnKQL #KQL

DALL-E.kql - Identifies Azure Open AI DALL-E activity

https://rodtrent.com/7ey

#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #Azure #AzureOpenAI #AI #MustLearnKQL #KQL

Cost of Syslog Events by Severity.kql - Calculate your effective Per GB Price.

https://rodtrent.com/8am

#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #MustLearnKQL #KQL

Ooooo...

#MustLearnKQL #KQL

This should a great session for #MSBuild

Kusto detective agency Q&A Tuesday, May 23 - 2:30 PM - 3:30 PM EST https://rodtrent.com/zcg

#MustLearnKQL #KQL

DetectLogIngestionStoppage.kql - This query looks for multiple data sources and returns if any of the data sources have not been sending logs for the past 1 hour.

https://rodtrent.com/qou

#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #MustLearnKQL #KQL

I'm not saying it's expected - it never is - but I love responses like this to passing the Must Learn KQL series...

"Thank you for the awesome material! Learned a lot and have immediate use for it all."

https://aka.ms/MustLearnKQL

#MustLearnKQL #KQL