KQL

• 

  Microsoft Sentinel: Detecting and Responding to Ransomware Indicators

  July 18, 2026
• 

  Troubleshooting Conditional Access Policies Causing User Lockouts

  July 15, 2026
• 

  KQL for SOC Analysts: Writing Detection Rules for Common Attack Patterns

  July 10, 2026
• 

  Microsoft Sentinel KQL: Detecting Credential Theft and Pass-the-Hash Attacks

  July 3, 2026