Tag: kql

Dec 8, 2025

↗

Building Bulletproof Sentinel Queries: The Universal EventData XML Parser Pattern
Sep 16, 2024

↗

Log Source Availability Monitoring with KQL in Microsoft Sentinel: An Essential Query for SOC Teams
May 24, 2024

↗

Why Incident Counts Differ in Microsoft Sentinel: Portal vs. SecurityIncident Table
Apr 25, 2024

↗

Analyzing Authentication Methods in Azure: Insights from Azure Active Directory Audit Logs