Skip to main content

#microsoft-sentinel

Every article tagged “microsoft-sentinel”, newest first.

Articles tagged microsoft-sentinel

Abstract layered rows of translucent amber panels flowing left to right against a dark background, suggesting data moving through sequential stages

Tutorials

Kusto Query Language (KQL): A SOC Analyst's Practical Tutorial

Kusto Query Language (KQL) is how you query Microsoft Sentinel and Defender XDR logs. Learn to read a KQL query, write one, and run two real triage examples.

Astrid Lindqvist17 min read