Awesome-Azure-Security

KQL Resources

Begginer Sources

• MustLearnKQL For Begginers
• KQL Overview
• SC-200 KQL tutorial
• blue-teaming-with-kql
• SQL to KQL mapping
• Splunk to KQL mapping
• ArcSight/QRadar to KQL mapping
• Azure Sentinel webinar: KQL part 1 of 3 - Learn the KQL you need for Azure Sentinel
• Azure Sentinel webinar: KQL part 2 of 3
• PluralSight-Kusto Query Language (KQL) from Scratch
• PluralSight-KQL from Scratch-Exercises
• Write your first query with Kusto Query Language
• Popular Azure Sentinel Tables

Advanced

• Azure Sentinel webinar: KQL Part 3 of 3
• KQL Join Statement
• KQL Query Best Practices
• KQL Cheatsheets
• KQL Playlist
• PluralSight-Microsoft Azure Data Explorer - Advanced KQL
• KQL Functions
• Draw a tree with KQL

KQL Rules

• Wortell's KQL Rules
• KQLPublic
• Matt Zorich's Repo
• KQL-Intune
• KQL Definitive Guide

KQL Workbooks

• Intro KQL
• Advanced KQL

KQL Lab Environment

• KQL Demo Environment
• KQL Dataexplorer

KQL Cheatsheets

• KQL Cheatsheets
• KQL Quick Reference

KQL Q&A

• Stackoverflow
• Microsoft Techcommunity
• KQL Cafe

Tools

• Kusto Explorer
• Kusto Cli
• Visual Studio Kusto Extension Pack
• RealTime KQL

KQL social Media

• #KQL
• #365daysofkql

Microsoft Sentinel

Follow and Be Updated

• Weekly Newsletter
• Twitter-#MicrosoftSentinel
• Linkedin-Microsoft Sentinel Community
• Facebook Sentinel Page
• Rodtrent-Blog
• Microsoft Sentinel Blog
• What's New Microsoft Sentinel
• [Kusto Insights] (https://kustoinsights.substack.com/)

Follow blogs for more knowledge

• O365Blog
• Cloud-Architekt
• LearnSentinel Blog
• MicrosoftInternals Blog
• MSconfig Blog
• CloudBrothers Blog
• Daniel Chronlund Cloud Tech Blog
• SecureCloud Blog
• Joonas W
• jeffreyappel

Webinars

• Microsoft Sentinel Youtube Channel
• Azure Sentinel Security Webinars
• Microsoft Identity Twitter Spaces

Introduction

• Introduction to sentinel
• Introduction to Sentinel-SOC

Labs

• Simuland
• Azure AD Attack-Defense Playbook
• Sysinternal Live
• AZ-500 Labs

Other

• MSRC blog
• What's Next In Microsoft Security
• Microsoft Security Blog
• AzureSpringClean
• AzurePortal-How-To Series
• MicrosoftSecurityInsights-Twitch
• MSportals
• m365maps
• AzureFeeds

podcasts

• Azure Security Podcasts

Microsoft Defender Endpoint

Follow and Be Updated

• Microsoft Defender Endpoint-Linkedin
• Microsoft Defender Endpoint-Twitter
• Microsoft Defender Weekly Wrap
• Microsoft Defender Endpoint-Facebook

Microsoft Defender For Identity

Follow and Be Updated

• Youtube Channel

Azure Storage Accounts

Storage Account Matrix v2