Can I read KQL TH on EtoBox?

KQL TH by Ankit Biswal is a document available to read on EtoBox.

What is KQL TH about?

The document provides guidance on using Kusto Query Language (KQL) for threat hunting in Microsoft Sentinel and Microsoft Defender XDR. It includes examples of KQL queries for detecting various security events, such as failed logons, malicious document execution, and suspicious process creation. The document emphasizes the importance of aggregating and visualizing data to identify patterns and enhance threat detection capabilities.

Author

Ankit Biswal

Language

EN