KQL Cafe - May 2024 Recording and Presentation Recording Presentation Hosts Gianni Alex Guests Nicola Suter News Definitive Guide to KQL Released The CloudAuditEvents table in the advanced hunting schema contains information about cloud audit events for various cloud platforms protected by the organization's Microsoft Defender for Cloud Hunting in Azure subscriptions - Guidance Microsoft Security Exposure Management (XSPM) Overview Part 1 Microsoft Security Exposure Management (XSPM) Overview Part 2 Guest Nicola Suter What did you do with KQL this month? Journey with Microsoft Security: From CASB to Project Breeze Microsoft Sentinel benefit for Microsoft 365 E5, A5, F5, and G5 customers KQL Query EntraID - Group Membership changes - Dynamic Group memberships Microsoft Defender for Identity - Attack Disruption