41554 blogs · [ { "id": "01a08796-e978-7186-aa65-26e9ab2ce7df", "title": "ClickFix: The Gift That Keeps On Giving", "url": "https://kqlquery.com/posts/clickfix-gift-that-keeps-on-giving/", "published_at": "2026-06-30T00:00:00+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9abc2b521", "title": "EDR Incident Response Playbook: Containing Local Account Incidents", "url": "https://kqlquery.com/posts/defender-xdr-local-account-incident-response/", "published_at": "2026-05-26T22:06:18+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9abc8cb72", "title": "[DxBP] Part 2 - Detection Engineering Best Practices: Performance, Readability & Maintenance", "url": "https://kqlquery.com/posts/dxbp-part2/", "published_at": "2026-05-11T14:48:44+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9abe380c8", "title": "Unlock Different Security Perspectives with Kusto Graph Functions", "url": "https://kqlquery.com/posts/kql-graph-security-visualization/", "published_at": "2026-04-07T22:00:58+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9acad7677", "title": "[DxBP] Part 1 - Technical Detection Engineering Best Practices", "url": "https://kqlquery.com/posts/dxbp-part1/", "published_at": "2026-02-22T23:48:42+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9ad69f882", "title": "Defender for Endpoint Timeline Internals", "url": "https://kqlquery.com/posts/defender-endpoint-timeline-internals/", "published_at": "2026-01-25T23:10:00+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9ad6a569b", "title": "Monitor New Actions in Sentinel & Defender XDR (V2)", "url": "https://kqlquery.com/posts/monitor-new-actions-sentinel-defender-xdr/", "published_at": "2026-01-18T23:10:21+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9ae09f5c5", "title": "KQL Sources: 2026 Update", "url": "https://kqlquery.com/posts/kql-sources-2026/", "published_at": "2026-01-04T23:00:05+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9ae98effd", "title": "GraphApiAuditEvents: The new Graph API Logs", "url": "https://kqlquery.com/posts/graphapiauditevents/", "published_at": "2025-08-18T22:16:11+00:00" }, { "id": "01a08796-e978-7186-aa65-26e9aee4bfa9", "title": "Hunting Through APIs - Logic App Edition", "url": "https://kqlquery.com/posts/logicapp-kql-api/", "published_at": "2025-07-14T22:00:47+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/kqlquery.com/posts