Did you ever want to see the history of a device's wifi connections in Microsoft Defender for Endpoint?
I've knocked this up to do just that! Simply specify the device name and click RUN
github.com/mr-r3b00t/KQ...
I've knocked this up to do just that! Simply specify the device name and click RUN
github.com/mr-r3b00t/KQ...
KQL/hunting/wifi/network_info_per_device.kql at main · mr-r3b00t/KQL
This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet - mr-r3b00t/KQL
github.com
February 27, 2025 at 8:31 AM
Did you ever want to see the history of a device's wifi connections in Microsoft Defender for Endpoint?
I've knocked this up to do just that! Simply specify the device name and click RUN
github.com/mr-r3b00t/KQ...
I've knocked this up to do just that! Simply specify the device name and click RUN
github.com/mr-r3b00t/KQ...
September 21, 2026 at 1:34 PM
Methode: Bluesky-Firehose-Daten via KQL analysiert. Neue Accounts mit >90% Reply-Anteil gefiltert, Co-Follow-Netzwerk kartiert, Toxizität per ML-Modell (GermEval) bewertet. 156 neue Accounts gefunden, die nicht in bestehenden Listen waren. 3/3
bsky.app/profile/clem...
bsky.app/profile/clem...
May 13, 2026 at 6:38 AM
Methode: Bluesky-Firehose-Daten via KQL analysiert. Neue Accounts mit >90% Reply-Anteil gefiltert, Co-Follow-Netzwerk kartiert, Toxizität per ML-Modell (GermEval) bewertet. 156 neue Accounts gefunden, die nicht in bestehenden Listen waren. 3/3
bsky.app/profile/clem...
bsky.app/profile/clem...
January 12, 2025 at 4:29 PM
🎄 I shared a lab on reviewing Azure security with KQL + Resource Graph Explorer! My walkthrough is available as Day 14 of the Advent of Cloud Security:
❄️ Calendar, Day 14: advent.cloudsecuritypodcast.tv
❄️ Full Repo: github.com/siigil/azure...
❄️ Calendar, Day 14: advent.cloudsecuritypodcast.tv
❄️ Full Repo: github.com/siigil/azure...
GitHub - siigil/azure-kql-demo: Demo: Review your Azure security with the power of Resource Graph + KQL!
Demo: Review your Azure security with the power of Resource Graph + KQL! - siigil/azure-kql-demo
github.com
December 14, 2024 at 9:58 PM
🎄 I shared a lab on reviewing Azure security with KQL + Resource Graph Explorer! My walkthrough is available as Day 14 of the Advent of Cloud Security:
❄️ Calendar, Day 14: advent.cloudsecuritypodcast.tv
❄️ Full Repo: github.com/siigil/azure...
❄️ Calendar, Day 14: advent.cloudsecuritypodcast.tv
❄️ Full Repo: github.com/siigil/azure...
Learn KQL in 2025!
Here's some fantastic resources to get started!
The defacto standard manual for KQL from Microsoft Press: amzn.to/3C8OO01
Learn KQL in one month (2025 edition): amzn.to/3W88bgD
Must Learn KQL (free entry learning): aka.ms/MustLearnKQL
#MustLearnKQL #KQL
Here's some fantastic resources to get started!
The defacto standard manual for KQL from Microsoft Press: amzn.to/3C8OO01
Learn KQL in one month (2025 edition): amzn.to/3W88bgD
Must Learn KQL (free entry learning): aka.ms/MustLearnKQL
#MustLearnKQL #KQL
The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting (Business Skills)
The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting (Business Skills) [Morowczynski, Mark, Trent, Rod, Zorich, Matthew] on Amazon.com. *FREE* shipping on qualifying offers. The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting (Business Skills)
amzn.to
January 6, 2025 at 1:48 PM
Learn KQL in 2025!
Here's some fantastic resources to get started!
The defacto standard manual for KQL from Microsoft Press: amzn.to/3C8OO01
Learn KQL in one month (2025 edition): amzn.to/3W88bgD
Must Learn KQL (free entry learning): aka.ms/MustLearnKQL
#MustLearnKQL #KQL
Here's some fantastic resources to get started!
The defacto standard manual for KQL from Microsoft Press: amzn.to/3C8OO01
Learn KQL in one month (2025 edition): amzn.to/3W88bgD
Must Learn KQL (free entry learning): aka.ms/MustLearnKQL
#MustLearnKQL #KQL
Today I created a few KQL queries to detect AzureDevOps - Organization Settings changes.
github.com/alexverboon/...
#KQL #AzureDevOps #Security #Sentinel
github.com/alexverboon/...
#KQL #AzureDevOps #Security #Sentinel
November 18, 2024 at 9:54 PM
Today I created a few KQL queries to detect AzureDevOps - Organization Settings changes.
github.com/alexverboon/...
#KQL #AzureDevOps #Security #Sentinel
github.com/alexverboon/...
#KQL #AzureDevOps #Security #Sentinel
Hands-on Introduction to Microsoft KQL
Hands-on Introduction to Microsoft KQL
Getting started with KQL Queries
infosecwriteups.com
February 23, 2025 at 3:26 AM
Hands-on Introduction to Microsoft KQL
If you are an IT Pro or in InfoSec check out the #kql queries from this book at github.com/KQLMSPress/d.... Pick yourself up a copy with that extra Santa money. Thanks for the shout out @k0grad.bsky.social.
December 27, 2024 at 12:13 AM
If you are an IT Pro or in InfoSec check out the #kql queries from this book at github.com/KQLMSPress/d.... Pick yourself up a copy with that extra Santa money. Thanks for the shout out @k0grad.bsky.social.
Incident Response and Threat Hunting:
A comprehensive collection of Kusto Query Language (KQL) queries used in detection, threat hunting, that focuses on Detections and Digital Forensics
github.com/CodeByHarri/...
#dfir #incidentresponse #threathunting #KQL #detections
A comprehensive collection of Kusto Query Language (KQL) queries used in detection, threat hunting, that focuses on Detections and Digital Forensics
github.com/CodeByHarri/...
#dfir #incidentresponse #threathunting #KQL #detections
GitHub - CodeByHarri/Incident-Response-and-Threat-Hunting: A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cyber th...
A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cyber threats and incidents, covering areas like Detections, Dig...
github.com
November 16, 2024 at 3:53 AM
Incident Response and Threat Hunting:
A comprehensive collection of Kusto Query Language (KQL) queries used in detection, threat hunting, that focuses on Detections and Digital Forensics
github.com/CodeByHarri/...
#dfir #incidentresponse #threathunting #KQL #detections
A comprehensive collection of Kusto Query Language (KQL) queries used in detection, threat hunting, that focuses on Detections and Digital Forensics
github.com/CodeByHarri/...
#dfir #incidentresponse #threathunting #KQL #detections
Les femmes perdent jusqu’à 70 % de leur revenu l’année de la naissance d’un enfant, alerte le Haut Conseil à l’Égalité
➡️ https://l.humanite.fr/kQL
➡️ https://l.humanite.fr/kQL
September 9, 2026 at 11:30 AM
Les femmes perdent jusqu’à 70 % de leur revenu l’année de la naissance d’un enfant, alerte le Haut Conseil à l’Égalité
➡️ https://l.humanite.fr/kQL
➡️ https://l.humanite.fr/kQL
May 5, 2025 at 12:00 PM
Some keywords for the algorithm:
Threat Hunting
Detection Engineering
DFIR
Data Science
ML
Machine Learning
KQL
Kusto
Microsoft Sentinel
Microsoft Defender
MVP
Threat Hunting
Detection Engineering
DFIR
Data Science
ML
Machine Learning
KQL
Kusto
Microsoft Sentinel
Microsoft Defender
MVP
November 18, 2024 at 6:24 PM
Some keywords for the algorithm:
Threat Hunting
Detection Engineering
DFIR
Data Science
ML
Machine Learning
KQL
Kusto
Microsoft Sentinel
Microsoft Defender
MVP
Threat Hunting
Detection Engineering
DFIR
Data Science
ML
Machine Learning
KQL
Kusto
Microsoft Sentinel
Microsoft Defender
MVP
Search engine for KQL Queries
KQL (Kusto Query Language) is a query language that allows to extract meaningful insights from large datasets. Widely used in the cybersecurity (detecting Social Engineering Attacks, search devices with CVEs and more).
www.kqlsearch.com
KQL (Kusto Query Language) is a query language that allows to extract meaningful insights from large datasets. Widely used in the cybersecurity (detecting Social Engineering Attacks, search devices with CVEs and more).
www.kqlsearch.com
May 26, 2025 at 4:45 AM
Search engine for KQL Queries
KQL (Kusto Query Language) is a query language that allows to extract meaningful insights from large datasets. Widely used in the cybersecurity (detecting Social Engineering Attacks, search devices with CVEs and more).
www.kqlsearch.com
KQL (Kusto Query Language) is a query language that allows to extract meaningful insights from large datasets. Widely used in the cybersecurity (detecting Social Engineering Attacks, search devices with CVEs and more).
www.kqlsearch.com
April 30, 2025 at 12:00 PM
KQL (Kusto Query Language) is one of the skills I think all IT Pros, Admins, #Cybersecurity teams should learn since it really helps you dig into data and get insights.
I created an automated feed of #KQL Threads here on Bluesky: Like and subscribe to it here: bsky.app/profile/did:...
#security
I created an automated feed of #KQL Threads here on Bluesky: Like and subscribe to it here: bsky.app/profile/did:...
#security
November 10, 2024 at 6:34 PM
KQL (Kusto Query Language) is one of the skills I think all IT Pros, Admins, #Cybersecurity teams should learn since it really helps you dig into data and get insights.
I created an automated feed of #KQL Threads here on Bluesky: Like and subscribe to it here: bsky.app/profile/did:...
#security
I created an automated feed of #KQL Threads here on Bluesky: Like and subscribe to it here: bsky.app/profile/did:...
#security
The KQL Grimoire 📖
A collection of the most sought-after KQL spells for Microsoft Sentinel and DefenderXDR
www.linkedin.com/pulse/slims-...
A collection of the most sought-after KQL spells for Microsoft Sentinel and DefenderXDR
www.linkedin.com/pulse/slims-...
The KQL Grimoire
A collection of the most sought-after KQL spells for Microsoft Sentinel and DefenderXDR 🔥 [** Updated: 7th December 2024 **] Hello! Let me share a little about my professional journey. My experience s...
www.linkedin.com
December 7, 2024 at 5:24 AM
The KQL Grimoire 📖
A collection of the most sought-after KQL spells for Microsoft Sentinel and DefenderXDR
www.linkedin.com/pulse/slims-...
A collection of the most sought-after KQL spells for Microsoft Sentinel and DefenderXDR
www.linkedin.com/pulse/slims-...
Thomas Naunheim and Sami Lamppu quietly built one of the most useful open projects for Entra ID defenders.
The Entra ID Attack & Defense Playbook
It’s free, community-driven, and packed with real detection logic and KQL queries.
🧵👇
The Entra ID Attack & Defense Playbook
It’s free, community-driven, and packed with real detection logic and KQL queries.
🧵👇
November 1, 2025 at 11:14 AM
Thomas Naunheim and Sami Lamppu quietly built one of the most useful open projects for Entra ID defenders.
The Entra ID Attack & Defense Playbook
It’s free, community-driven, and packed with real detection logic and KQL queries.
🧵👇
The Entra ID Attack & Defense Playbook
It’s free, community-driven, and packed with real detection logic and KQL queries.
🧵👇
A new tradition has been born, the yearly KQL Community Sources list for 2025 has been published!
Happy hunting this year! 🏹
kqlquery.com/posts/kql-so...
Happy hunting this year! 🏹
kqlquery.com/posts/kql-so...
KQL Sources - 2025 Update
What started as a single blog is now becomming a yearly trend. More and more KQL related repositories are created, not only with focus on security but also Intune, Entra and Azure Monitor related quer...
kqlquery.com
January 2, 2025 at 3:36 PM
A new tradition has been born, the yearly KQL Community Sources list for 2025 has been published!
Happy hunting this year! 🏹
kqlquery.com/posts/kql-so...
Happy hunting this year! 🏹
kqlquery.com/posts/kql-so...
```kql
CloudAppEvents
| where ActionType == @"RunLiveResponseSession"
```
CloudAppEvents
| where ActionType == @"RunLiveResponseSession"
```
November 27, 2024 at 8:09 PM
```kql
CloudAppEvents
| where ActionType == @"RunLiveResponseSession"
```
CloudAppEvents
| where ActionType == @"RunLiveResponseSession"
```
The Kusto Query Language (KQL) is essential for data, security analysts, and IT operations engineers to query logs and security events in Azure.
My recent blog post explores KQL operators and offers insights on their usage.
My recent blog post explores KQL operators and offers insights on their usage.
Understanding KQL Operators
Let's take a look at Kusto Query Language (KQL) operators and how they can help build powerful queries.
buff.ly
January 28, 2025 at 11:50 AM
The Kusto Query Language (KQL) is essential for data, security analysts, and IT operations engineers to query logs and security events in Azure.
My recent blog post explores KQL operators and offers insights on their usage.
My recent blog post explores KQL operators and offers insights on their usage.
Hunting Invisible Unicode in Emails (+ KQL Queries) https://packetstorm.news/news/view/43987 #news
September 24, 2026 at 8:01 PM
Hunting Invisible Unicode in Emails (+ KQL Queries) https://packetstorm.news/news/view/43987 #news
Hey all you KQL fans have you ever used your #KQL skills to created workbooks to visualize data with #azureworkbooks?
There are many workbooks from the community gallery that are available in every #entra tenant when they enable log analytics.
There are many workbooks from the community gallery that are available in every #entra tenant when they enable log analytics.
November 13, 2024 at 12:19 AM
Hey all you KQL fans have you ever used your #KQL skills to created workbooks to visualize data with #azureworkbooks?
There are many workbooks from the community gallery that are available in every #entra tenant when they enable log analytics.
There are many workbooks from the community gallery that are available in every #entra tenant when they enable log analytics.