Deep dive into Microsoft Defender for Endpoint on Linux

Introduction This end of the year i finished a Defender for Endpoint on linux server…

KQL
Nouvelle Features: Optimisation SOC dans Microsoft Sentinel

Introduction À l’ère des menaces sophistiquées et de la pression constante sur les budgets des…

KQL
Guide Book sur les Summary Rules et les Auxiliary Logs dans Microsoft Sentinel (New PREVIEW)

Microsoft Sentinel, Cloud native SIEM de Microsoft, propose des nouvelles fonctionnalités avancées permettant une gestion…

KQL
Kusto Detective Agency: A good KQL Introduction

KQL stands for "Kusto Query Language", it is a big data analytics query language used…

KQL
Kusto Detective Agency: Chall #1

The rarest book is missing! This was supposed to be a great day for Digitown’s…

KQL
Kusto Detective Agency: Chall #2

he mayor of Digitown, Mrs. Gaia Budskott, has found herself in quite a pickle. The…

KQL
Kusto Detective Agency: Chall #3

Bank robbery We have a situation, rookie.As you may have heard from the news, there…

KQL
Kusto Detective Agency: Chall #4

Hello. I have been watching you, and I am pretty impressed with your abilities of…

KQL
Kusto Detective Agency: Chall #5

Hello. It's going to happen soon: a big heist. You can stop it if you…

KQL
Splunk SPL VS Microsoft KQL

Splunk SPL (Search Processing Language) is the query language used in the Splunk software platform…