KQL Basics and Advanced KQL Hunting for Microsoft 365 Defender

Since it seems I’ve become all things KQL for our security platforms (which I don’t mind at all, btw), I thought I’d step outside the Sentinel realm for a moment and share some recent releases for using KQL with Microsoft 365 Defender.

Here’s some awesome video content learning…

M365D KQL Basics:

https://cda.ms/3D3

M365D Advanced Hunting:

https://cda.ms/3D4

=========================

[Want to discuss this further? Hit me up on Twitter or LinkedIn]

[Subscribe to the RSS feed for this blog]

[Subscribe to the Weekly Microsoft Sentinel Newsletter]

[Subscribe to the Bi-Weekly Defender for Cloud Newsletter]

[Learn KQL with the Must Learn KQL series and book]

Author