A working reference of Kusto for Microsoft Sentinel — every detection, hunt, and cost query validated against real tables before it enters the catalogue. Read it cover to cover, or jump to a tactic and lift what you need.