In this article I will provide a detailed KQL query to help identify suspicious behavior that may indicate a defense evasion as described…

If you are someone who is looking to learn about KQL to investigate in Microsoft Defender or Sentinel then this article is for you.

In today’s evolving cyber threat landscape, it’s crucial to have systems in place that can detect and respond to potential breaches in real…

You can find the complete collection of Sandfly related articles here:

Learning to perform KQL queries in Microsoft Sentinel

Sentinel lookup query for macOS tools that threat actors love!

DDoS attacks are among the most widely recognized forms of cyberattacks, familiar to both newcomers and experienced professionals in the…

Intro

Security Operations Centers (SOCs) today face a paradox: more alerts, but less visibility into real threats. While attackers get smarter —…

Artificial intelligence is revolutionizing cybersecurity — but not just for the good guys. In 2025, AI is powering smarter phishing scams…

Cases Solutions: 1 2 3 4 5 6 7 8 9 10

Cases Solutions: 1 2 3 4 5 6 7 8 9 10

Cases Solutions: 1 2 3 4 5 6 7 8 9 10

Cases Solutions: 1 2 3 4 5 6 7 8 9 10

Hi there! I’m Vedant, a cybersecurity grad and a Microsoft Certified Security Operations Analyst, stepping into the SOC world. This is the…

TryHackMe: Defending Azure — My Review TL;DR: Recently completed TryHackMe’s Defending Azure path. I stood up detections in Sentinel, hunted with KQL, triaged alerts in Defender XDR, reviewed …

This room is designed to work you through basic KQL queries for analyzing security logs

Based on the indicators from the article, here’s a KQL query for Microsoft 365 Defender (Advanced Hunting) that detects potential execution…

The Valdorian Times has published another groundbreaking article ahead of the election. This time, it’s about the incumbent mayoral…

Description : This room introduces you to Kusto Query Language and provides an overview of Microsoft Sentinel.