Nov 22, 2023 · To create the new playbook, go into Sentinel and select the Automation blade. Once there, hit the “Create” button at the top and click “Playbook ...

Nov 24, 2023 · Using KQL in a Playbook for Sentinel - I was working with a customer recently and they wanted to run a playbook in Microsoft Sentinel that ...

Nov 22, 2023 · This button displays the currently selected search type. When expanded it provides a list of search options that will switch the search inputs ...

Nov 22, 2023 · The Definitive Guide to KQL: Using Kusto Query Language for Operations, Defending, and Threat Hunting KQL: https://amzn.to/3uzi3Vz. After the ...

Nov 22, 2023 · Fun with parsing JSON.

Oct 6, 2023 · First off, there's an opportunity for feedback. Graph semantics in Kusto Query Language (KQL) allows you to model and query data as graphs.

Nov 24, 2023 · The Definitive Guide to KQL: Using Kusto Query Language for Operations, Defending, and Threat Hunting (https://aka.ms/KQLMSPress) has been a ...

Andrea's blog post - Using KQL in a Playbook for Sentinel: https://securityinsights.substack.com/p/using-kql-in-a-playbook-for-sentinel. KQL... Read More ...

Jan 6, 2023 · After much deliberation, discussion, and hearing recommendations, I chose Substack for the new editing, publishing, and delivery mechanism.

Hosted by Edward Walton, Andrea Fisher, Rod Trent, and Brodie Cassell, the Microsoft Security Insights show provides information, news, tips on the Microsoft ...