FileMaliciousContentInfo table in the advanced hunting schema - Microsoft Defender XDR Learn about the FileMaliciousContentInfo table of the advanced hunting schema

𝗙𝗶𝗹𝗲𝗠𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀𝗖𝗼𝗻𝘁𝗲𝗻𝘁𝗜𝗻𝗳𝗼 is a newly introduced 🔍 #AdvancedHunting table for 🛡️ Microsoft Defender for Office 365, currently available in 𝗣𝘂𝗯𝗹𝗶𝗰 𝗣𝗿𝗲𝘃𝗶𝗲𝘄.

🔗 More info: learn.microsoft.com/en-us/defend...

#MicrosoftSecurity #MicrosoftDefender #DefenderXDR #KQL #KustoQuery

🔍 Ready to take your KQL skills to the next level? Advanced Must Learn KQL breaks down complex queries into simple, actionable steps. Perfect for data analysts and engineers! Get your copy today. 💻
🔗 https://amzn.to/3VDrEFs #KustoQuery #DataEngineering #TechLearning #MustLearnKQL #KQL

🔍 Ready to take your KQL skills to the next level? Advanced Must Learn KQL breaks down complex queries into simple, actionable steps. Perfect for data analysts and engineers! Get your copy today. 💻
🔗 https://amzn.to/3VDrEFs #KustoQuery #DataEngineering #TechLearning #MustLearnKQL #KQL

🔍 Ready to take your KQL skills to the next level? Advanced Must Learn KQL breaks down complex queries into simple, actionable steps. Perfect for data analysts and engineers! Get your copy today. 💻
🔗 https://amzn.to/3VDrEFs #KustoQuery #DataEngineering #TechLearning #MustLearnKQL #KQL

🔍 Ready to take your KQL skills to the next level? Advanced Must Learn KQL breaks down complex queries into simple, actionable steps. Perfect for data analysts and engineers! Get your copy today. 💻
🔗 https://amzn.to/3VDrEFs #KustoQuery #DataEngineering #TechLearning #MustLearnKQL #KQL

🔍 Ready to take your KQL skills to the next level? Advanced Must Learn KQL breaks down complex queries into simple, actionable steps. Perfect for data analysts and engineers! Get your copy today. 💻
🔗 https://amzn.to/3VDrEFs #KustoQuery #DataEngineering #TechLearning #MustLearnKQL #KQL

Keeping privacy when running queries: how to obfuscate your KQL results Introduction While KQL empowers Log Analytics and Advanced Hunting users to extract critical insights from relevant data sets, they are often met with requirements dictating results sharing. It is …

𝐊𝐞𝐞𝐩𝐢𝐧𝐠 𝐩𝐫𝐢𝐯𝐚𝐜𝐲 𝐰𝐡𝐞𝐧 𝐫𝐮𝐧𝐧𝐢𝐧𝐠 𝐪𝐮𝐞𝐫𝐢𝐞𝐬: 𝐡𝐨𝐰 𝐭𝐨 𝐨𝐛𝐟𝐮𝐬𝐜𝐚𝐭𝐞 𝐲𝐨𝐮𝐫 𝐊𝐐𝐋 𝐫𝐞𝐬𝐮𝐥𝐭𝐬

Sharing your screen with results on a call and removing a column from your project operator seems too easy?

🔗 Blog post: www.michalos.net/2025/09/19/k...

#MicrosoftSecurity #KustoQuery

🏹 𝐍𝐞𝐰 #𝐊𝐐𝐋 𝐪𝐮𝐞𝐫𝐲!

➡️ 𝐅𝐞𝐭𝐜𝐡 𝐝𝐲𝐧𝐚𝐦𝐢𝐜 𝐚𝐧𝐝 𝐦𝐚𝐧𝐮𝐚𝐥 𝐭𝐚𝐠𝐬 𝐟𝐨𝐫 𝐚𝐜𝐭𝐢𝐯𝐞 𝐝𝐞𝐯𝐢𝐜𝐞𝐬
🔗 github.com/cyb3rmik3/KQ...

#MicrosoftSecurity #KustoQuery #KustoQueryLanguage #MicrosoftSentinel #MicrosoftDefender #MicrosoftDefenderXDR

That's me after owning the make-graph operator and building my first #KQL query for Exposure Management in Advanced Hunting.

More, coming soon.

#KustoQuery

📢 New blog post 📢

𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐫𝐨𝐦 𝐭𝐡𝐞 𝐭𝐫𝐞𝐧𝐜𝐡𝐞𝐬: 𝐛𝐮𝐢𝐥𝐝𝐢𝐧𝐠 𝐚𝐮𝐝𝐢𝐭 𝐜𝐚𝐩𝐚𝐜𝐢𝐭𝐲 𝐟𝐨𝐫 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐒𝐞𝐧𝐭𝐢𝐧𝐞𝐥 & 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐗𝐃𝐑

🔗 Blog post: www.michalos.net/2025/06/20/i...

#MicrosoftSecurity #MicrosoftSentinel #DefenderXDR #KustoQuery #KustoQueryLanguage #Audit #Compliance

I'm thrilled to be joining an amazing group of friends and peers for a full day of community-driven discussions and learning around #KQL at KustoCon 2025, taking place on November 6th in Zurich!

(1/2)

#KustoCon #KustoQuery #MicrosoftSecurity #MicrosoftSecurityCommunity

April's Kusto Insights newsletter curated by @ugurkoc.de & @bertjancyber.bsky.social just dropped!

🔗 kustoinsights.substack.com/p/kusto-insi...

#MicrosoftSecurity #MicrosoftDefender #MicrosoftSentinel #KustoQuery #KQL #KustoQueryLanguage

Effective strategies for fighting redirectors with UrlClickEvents, UrlChain, & DeviceNetworkEvents Introduction Looking into different redirection scenarios Conditions of the scenarios executed Results elaboration and key takeaways Matching UrlClickEvents and UrlChain to TI sources Unfolding the…

📢 New blog out: 𝐄𝐟𝐟𝐞𝐜𝐭𝐢𝐯𝐞 𝐬𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐞𝐬 𝐟𝐨𝐫 𝐟𝐢𝐠𝐡𝐭𝐢𝐧𝐠 𝐫𝐞𝐝𝐢𝐫𝐞𝐜𝐭𝐨𝐫𝐬 𝐰𝐢𝐭𝐡 𝐔𝐫𝐥𝐂𝐥𝐢𝐜𝐤𝐄𝐯𝐞𝐧𝐭𝐬, 𝐔𝐫𝐥𝐂𝐡𝐚𝐢𝐧, & 𝐃𝐞𝐯𝐢𝐜𝐞𝐍𝐞𝐭𝐰𝐨𝐫𝐤𝐄𝐯𝐞𝐧𝐭𝐬

🔗 www.michalos.net/2025/03/09/e...

#Microsoft #MicrosoftSecurity #MicrosoftSentinel #MicrosoftDefender #DefenderXDR #UnifiedSecOps #ThreatIntelligence #ThreatIntel #KQL #KustoQuery

Kusto Insights - February Update Welcome to a new Monthly Update.

Another great newsletter of Kusto Insights curated by @ugurkoc.de and @bertjancyber.bsky.social!

Awesome highlighted #KQL query by @robbevddaele.bsky.social.

🔗 kustoinsights.substack.com/p/kusto-insi...

#MicrosoftSecurity #MicrosoftDefender #MicrosoftSentinel #KustoQuery

🏹 New #KQL query!

➡️ 𝐈𝐝𝐞𝐧𝐭𝐢𝐟𝐲 𝐞𝐧𝐝𝐩𝐨𝐢𝐧𝐭𝐬 𝐰𝐢𝐭𝐡 𝐜𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐥𝐨𝐠𝐠𝐞𝐝 𝐨𝐧 𝐮𝐬𝐞𝐫𝐬, 𝐚𝐧𝐝 𝐬𝐡𝐚𝐫𝐞𝐬 𝐰𝐢𝐭𝐡 𝐩𝐞𝐫𝐦𝐢𝐬𝐬𝐢𝐨𝐧 𝐬𝐞𝐭 𝐭𝐨 “𝐄𝐯𝐞𝐫𝐲𝐨𝐧𝐞”
🔗 github.com/cyb3rmik3/KQ...

#MicrosoftSecurity #KustoQuery #KustoQueryLanguage #MicrosoftMDVM #VulnerabilityManagement

📬 Have you checked latest Kusto Insights by @ugurkoc.de & @bertjancyber.bsky.social

🗓 December update is available now kustoinsights.substack.com/p/kusto-insi...

#KustoInsights #KustoQuery #KustoQueryLanguage #KQL #MicrosoftSecurity

Sergio Albea on LinkedIn: #theathunting #kqlquery #cybersecurity | 19 comments 📆 🍫 𝗞𝗤𝗟 𝗔𝗱𝘃𝗲𝗻𝘁 𝗖𝗮𝗹𝗲𝗻𝗱𝗮𝗿 𝗰𝗼𝗺𝗽𝗹𝗲𝘁𝗲𝗱 ❤️ 🎄 Is over! I wasn’t sure how it would turn out, but I’m really happy with what we’ve… | 19 comments on LinkedIn

Sergio Albea completed yesterday a Christmas Advent calendar for #KQL including queries mainly bult by him but also from fellow peers as well.

That was an awesome community contribution!

🔗 Check it out here: www.linkedin.com/posts/sergio...

#KustoQuery #MicrosoftSecurity #ThreatHunting

Query data in a KQL database in Microsoft Fabric | Lab 12 YouTube video by Kamil Data Geek - Azure explained

💎 With KQL Database in Microsoft Fabric you can use KQL or SQL language, depending on your preference.
📢 Check out the new video on YouTube channel:
👨‍🎓 Query data in a KQL database in Microsoft Fabric
youtu.be/bSscFdbn2Ns
#MicrosoftFabric #KQL #KustoQuery #mvpbuzz