KQL Cafe - 27. February 2024

Recording and Presentation

• Recording
• Presentation

Hosts

• Gianni
• Alex

Guests

• Fabian Bader

News

• Learn KQL in one month
• KQL Queries for Intune
• Function: ListAllActionsAndOperations()
• Device Isolation Notification
• Update records in ADX

Learn KQL

Prev Next

Guest

Fabian Bader CloudBrothers GitHub

What did you do with KQL this month?

Monitoring Windows built-in local security Groups with Microsoft Defender XDR or Sentinel

• Monitoring Windows built-in local security Groups with Microsoft Defender XDR or Sentinel
• KQL

Microsoft Sentinel - TAXII Connector failures

• KQL

Auditing Defender Controlled Folder Access