KQL Query
Posts
Categories
whoami
Projects
Events
KQL News
KQL Query
Cancel
Posts
Categories
whoami
Projects
Events
KQL News
Defender For Endpoint
2025
Monitor For New Actions In Sentinel And MDE
01-30
KQL Sources - 2025 Update
01-02
2024
Unleash The Power Of DeviceTvmInfoGathering
10-10
Audit Defender XDR Activities
05-30
Detecting Post-Exploitation Behaviour
02-29
KQL Security Sources - 2024 Update
01-14
2023
Prioritize Vulnerabilities Using The CISA Known Exploited Vulnerabilities Catalog
12-21
From Threat Report to (KQL) Hunting Query
11-29
Incident Response Part 3: Leveraging Live Response
10-26
Incident Response Part 1: IR on Microsoft Security Incidents (KQL edition)
09-29
Threat Hunting: Encoded PowerShell
09-21
KQL Functions For Security Operations
09-15