DEV Community

#kql

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Hunting Impossible Travel in Sentinel with KQL

Hunting Impossible Travel in Sentinel with KQL

Comments
6 min read
Sentinel showed the same attack twice. Then it missed the next one.

Sentinel showed the same attack twice. Then it missed the next one.

Comments
11 min read
Case study: the VIP list nobody updated

Case study: the VIP list nobody updated

Comments
10 min read
Sentinel pricing: why the bill jumped

Sentinel pricing: why the bill jumped

Comments
15 min read
Case study: the threat intel feed that never expires (and has no confidence)

Case study: the threat intel feed that never expires (and has no confidence)

3
Comments 2
8 min read
CEF and Syslog to Sentinel through AMA: connected, but no data

CEF and Syslog to Sentinel through AMA: connected, but no data

Comments
11 min read
Hunting Password Spray in Sentinel: One Password Against a Thousand Doors

Hunting Password Spray in Sentinel: One Password Against a Thousand Doors

Comments
5 min read
Microsoft Sentinel KQL: A Practical Introduction for Threat Hunting

Microsoft Sentinel KQL: A Practical Introduction for Threat Hunting

Comments
4 min read
Hunting MFA Fatigue in Sentinel: Building the Detection One Line at a Time

Hunting MFA Fatigue in Sentinel: Building the Detection One Line at a Time

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.