I talked recently about XPath queries in relations to the new Windows Security Events Data Connector in Azure Sentinel. To catch up to that discussion, see: How to Limit What Azure Sentinel Collects from Windows Systems. XPath queries are something you'll need to become comfortable with creating to use Data Collection Rules (DCRs) that are … Continue reading Shortcut Way to Create Your XPath Queries for Azure Sentinel DCRs →