Microsoft Sentinel: Building Custom Queries with KQL скачать в хорошем качестве

Microsoft Sentinel: Building Custom Queries with KQL

Microsoft Sentinel enables us to collect logs from multiple of sources with these logs we can create custom queries using KQL to process and return data. In this video I'll go through creating these custom queries using different operators, variables, and arrays. Additionally, I'll go through the concept of creating a chart using Microsoft Sentinel log data. I would highly recommend everyone learning KQL as it will be frequently used with Microsoft Defender, Azure Log Analytics, and Microsoft Sentinel. Microsoft Sentinel Demo Workspace: https://aka.ms/LADemo