#kql

MFA fatigue is the attack that works because people are tired. The attacker already has the password,...

Threat hunting isn’t about waiting for an alert. It’s about proactively testing hypotheses against...

The first Application Insights post on this blog the App Insights post covered what it is and how to...

I have always liked to twiddle with computers and dig around in files. It's time for me to do a...

Most people who run Sentinel don’t really hunt in it. They wire up the connectors, switch on a pile...

A practical guide to the new Fabric Real-Time Dashboard updates: AI-assisted visual authoring, Time Series visualization, and Live Refresh. The real win is not prettier dashboards. It is operational screens people can trust.

KQL Boardroom Intelligence | The AI Translation Layer Transforming Sentinel and Defender XDR...

KQL as a Defensive Weapon Advanced Hunting in Microsoft Defender XDR for...

Production-ready KQL queries for Azure admins managing resources at scale

Billy York's Azure Inventory Workbook is excellent. Here's how to scale it to 200+ services, add security hygiene, and make it actually usable at enterprise scale.

Kusto Query Language (KQL) — A Practical, No‑BS Guide for Engineers Wondering if KQL is...

Azure Application Insights — The No‑BS Guide for Pro Teams (APM, KQL, cost, and...