rodtrent :verified: · @rodtrent
496 followers · 1054 posts · Server infosec.exchange

Counts the number of subscription creation events per hour rodtrent.com/9kk

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
496 followers · 1042 posts · Server infosec.exchange

KQL : Azure AD Identity Protection & Detection rodtrent.com/y4j

#mustlearnkql #KQL #azuread #azureidentity

Last updated 1 year ago

rodtrent :verified: · @rodtrent
494 followers · 1019 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
490 followers · 998 posts · Server infosec.exchange

PlaybookActivity.kql - Watch Playbook execution and display Playbook name, which action was invoked, and who did it rodtrent.com/ija

#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql

Last updated 1 year ago

rodtrent :verified: · @rodtrent
491 followers · 994 posts · Server infosec.exchange

ChatGPT/OpenAI is the new shiny thing. To monitor security for the new shiny you'll need KQL skills.

Not started learning KQL yet? Start this weekend with this in-depth, hands-on learning tool! aka.ms/MustLearnKQL

#mustlearnkql #KQL #openai #ai

Last updated 1 year ago

matsest · @matsest
13 followers · 4 posts · Server hachyderm.io

TIL: How to search for two consecutive log entries in using to make an alert in using the prev() operator.

In this case the error message is generic, and I need the context of the previous message to create a specific alert.

#loganalytics #KQL #azuremonitor #mustlearnkql

Last updated 1 year ago

rodtrent :verified: · @rodtrent
487 followers · 978 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
487 followers · 974 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
486 followers · 968 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
480 followers · 928 posts · Server infosec.exchange

Take your Must Learn KQL skills to the next level with the Cloud Skills Challenge - Learn Kusto Query Language (KQL) rodtrent.com/8gl

#mustlearnkql #KQL #microsoftlearning

Last updated 1 year ago

rodtrent :verified: · @rodtrent
478 followers · 913 posts · Server infosec.exchange

Detecting AD CS subjectAltName (SAN) Abuse Using KQL rodtrent.com/poj

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
478 followers · 909 posts · Server infosec.exchange

Just finished delivering the first Must Learn KQL completion certificate for March. Congrats everyone!

aka.ms/MustLearnKQL

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
478 followers · 894 posts · Server infosec.exchange

KQLSearch gets better and better. Tried it yet?

kqlsearch.com/

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
476 followers · 866 posts · Server infosec.exchange

Start your day and week out right. Get on the KQL train! You could have your completion certificate by this weekend.

aka.ms/MustLearnKQL

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
471 followers · 846 posts · Server infosec.exchange

Really wish Amazon's self-publishing tools worked better. I've heard many times about small fonts, small images, and page numbers. Also wish reviews could always be based on the book content.

For those interested, at least the Kindle version can be resized in the app and uses its own page numbering system.

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
470 followers · 834 posts · Server infosec.exchange

stats update for Feb 2023

aka.ms/MustLearnKQL

#mustlearnkql

Last updated 1 year ago

rodtrent :verified: · @rodtrent
470 followers · 821 posts · Server infosec.exchange

The shopping cart is new

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
470 followers · 818 posts · Server infosec.exchange

Been working with KQL for so long, got my PowerShell and KQL commenting indicators mixed up.

#mustlearnkql #powershell

Last updated 1 year ago

rodtrent :verified: · @rodtrent
466 followers · 776 posts · Server infosec.exchange

Heard from a couple people this week that they were targeted for new jobs because of posting their Must Learn KQL completion certificate on LinkedIn. Pretty cool!

aka.ms/MustLearnKQL

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
464 followers · 757 posts · Server infosec.exchange

Bing Chat knows...

#mustlearnkql #KQL

Last updated 1 year ago