KQLCafe
@kqlcafe.bsky.social
A Community to make the world a better place with KQL | Learn, share and practice the KQL language #KQL #Security #ThreatHunting #LogAnalytics #DataExplorer https://kqlcafe.com/
🎉 KustoCon 2025 is official! Watch the announcement video and register now for the main event or join us onsite in Zurich for also the hands-on detection engineering workshop! Info & sign-up: kustocon.com/sessions/ #KustoCon #KQL #KustoFans
Sessions | KustoConEvent Timetable
kustocon.com
Interested to learn more about Azure Fabric? Join us at the KQLCafe tomorrow Tuesday February 25, 18:00 CET with guest speaker Uri Barash More information and registration here: kqlcafe.com#upcoming-shows #kql #AzureFabric #Kusto
KQL Cafe
If you'd like to share your query with the community, feel free to share it via kqlsearch.com Submit Query
kqlcafe.com
Microsoft is retiring the MFA Fraud alert in favor of the replacement feature "Report Suspicious Activity" here's a KQL query to detect these events. github.com/alexverboon/... #KQL #EntraID #mvpbuzz #MFA
github.com
[New KQL Query] Detect changes to Microsoft Entra ID Self Service Password Reset configuration settings github.com/alexverboon/... #KQL #EntraID #SSPR #mvpbuzz
github.com
#100DaysOfKQL Day 18 - Unique DLL With Low Prevalence Loaded From Commonly Abused Folder Could probably still be fine-tuned further, but it should detect campaigns/malware such as the ones listed in the Description. May also find unwanted software 👀 github.com/SecurityAura...
github.com
Hello #KQL Fans & Geeks, We are taking a short break, but we'll be back in January 2025. Check out our lineup of guest speakers here: kqlcafe.com#our-mission And in case you missed it, the KustoCon Conference session recordings are available now. kqlcafe.com/KustoCon/Kus...
Time to get a #KQL query from the shelve: Potential Adversary in the middle Phishing If you have High-Risk users and axios useragents in the results please revoke some sessions. 🏹 github.com/Bert-JanP/Hu... Query is available for both SigninLogs and AADSignInEventsBeta.
github.com
BleepingComputer@bleepingcomputer.com · 2y agoA new phishing-as-a-service (PhaaS) platform named 'Rockstar 2FA' has emerged, facilitating large-scale adversary-in-the-middle (AiTM) attacks to steal Microsoft 365 credentials. www.bleepingcomputer.com/news/securit...
🚀 Relive KustoCon 2024! 🧠🌐 Our 6 expert-led sessions are now available for you to watch on-demand. Dive into the latest KQL insights from top community experts. 📹 👉 Watch here: lnkd.in/edeRJQtd
This link will take you to a page that’s not on LinkedIn
lnkd.in
Do you like #KQL ? Then follow us here and check out our monthly meetup schdule kqlcafe.com #mvpbuzz #Community #Learn #Share #Practice #KQL #KustoQueryLanguage
