https://learnsentinel.blog/2023/05/15/have-a-json-headache-in-kql-try-mv-expand-or-mv-apply/https://learnsentinel.blog/wp-content/uploads/2023/05/image-15.pngimage-15https://learnsentinel.blog/wp-content/uploads/2023/05/image-14.pngimage-14https://learnsentinel.blog/wp-content/uploads/2023/05/image-13.pngimage-13https://learnsentinel.blog/wp-content/uploads/2023/05/image-12.pngimage-12https://learnsentinel.blog/wp-content/uploads/2023/05/image-11.pngimage-11https://learnsentinel.blog/wp-content/uploads/2023/05/image-10.pngimage-10https://learnsentinel.blog/wp-content/uploads/2023/05/image-9.pngimage-9https://learnsentinel.blog/wp-content/uploads/2023/05/image-8.pngimage-8https://learnsentinel.blog/wp-content/uploads/2023/05/image-7.pngimage-7https://learnsentinel.blog/wp-content/uploads/2023/05/image-6.pngimage-62023-05-15T03:53:33+00:00monthlyhttps://learnsentinel.blog/2022/03/16/maintaining-a-well-managed-azure-ad-tenant-with-kql/2023-01-03T08:28:39+00:00monthlyhttps://learnsentinel.blog/2022/10/06/a-picture-is-worth-a-thousand-words-visualizing-your-data/https://learnsentinel.blog/wp-content/uploads/2022/10/image-17.pngimage-17https://learnsentinel.blog/wp-content/uploads/2022/10/image-16.pngimage-16https://learnsentinel.blog/wp-content/uploads/2022/10/image-15.pngimage-15https://learnsentinel.blog/wp-content/uploads/2022/10/image-14.pngimage-14https://learnsentinel.blog/wp-content/uploads/2022/10/image-13.pngimage-13https://learnsentinel.blog/wp-content/uploads/2022/10/image-12.pngimage-12https://learnsentinel.blog/wp-content/uploads/2022/10/image-11.pngimage-11https://learnsentinel.blog/wp-content/uploads/2022/10/image-10.pngimage-10https://learnsentinel.blog/wp-content/uploads/2022/10/image-9.pngimage-9https://learnsentinel.blog/wp-content/uploads/2022/10/image-8.pngimage-82022-10-06T12:32:15+00:00monthlyhttps://learnsentinel.blog/2022/09/06/improving-your-security-baseline-with-kql/https://learnsentinel.blog/wp-content/uploads/2022/09/image-1.pngimage-1https://learnsentinel.blog/wp-content/uploads/2022/09/image.pngimage2022-09-13T07:08:11+00:00monthlyhttps://learnsentinel.blog/2022/06/21/kql-lessons-learnt-from-365daysofkql/https://learnsentinel.blog/wp-content/uploads/2022/06/image-4.pngimage-4https://learnsentinel.blog/wp-content/uploads/2022/06/image-3.pngimage-3https://learnsentinel.blog/wp-content/uploads/2022/06/image-2.pngimage-2https://learnsentinel.blog/wp-content/uploads/2022/06/image-1.pngimage-1https://learnsentinel.blog/wp-content/uploads/2022/06/image.pngimage2022-08-13T14:12:40+00:00monthlyhttps://learnsentinel.blog/2022/05/09/azure-ad-conditional-access-insights-auditing-with-microsoft-sentinel/https://learnsentinel.blog/wp-content/uploads/2022/05/image-9.pngimage-9https://learnsentinel.blog/wp-content/uploads/2022/05/image-8.pngimage-8https://learnsentinel.blog/wp-content/uploads/2022/05/image-7.pngimage-7https://learnsentinel.blog/wp-content/uploads/2022/05/image-6.pngimage-6https://learnsentinel.blog/wp-content/uploads/2022/05/image-5.pngimage-5https://learnsentinel.blog/wp-content/uploads/2022/05/image-4.pngimage-4https://learnsentinel.blog/wp-content/uploads/2022/05/image-3.pngimage-3https://learnsentinel.blog/wp-content/uploads/2022/05/image-2.pngimage-2https://learnsentinel.blog/wp-content/uploads/2022/05/image-1.pngimage-1https://learnsentinel.blog/wp-content/uploads/2022/05/image.pngimage2023-05-18T08:56:34+00:00monthlyhttps://learnsentinel.blog/2022/04/12/monitoring-active-directory-with-microsoft-sentinel-the-agent-deep-dive/2023-05-19T12:13:45+00:00monthlyhttps://learnsentinel.blog/2022/03/24/deception-in-microsoft-sentinel-with-thinkst-canaries/2022-03-25T07:43:54+00:00monthlyhttps://learnsentinel.blog/2022/02/28/detecting-malware-kill-chains-with-defender-and-microsoft-sentinel/2022-03-01T19:52:20+00:00monthlyhttps://learnsentinel.blog/2022/02/09/summarize-your-data/2022-02-09T10:39:04+00:00monthlyhttps://learnsentinel.blog/2022/01/24/kqlception/2022-05-23T11:50:19+00:00monthlyhttps://learnsentinel.blog/2022/01/04/azuread-privesc-sentinel/2022-01-04T03:11:45+00:00monthlyhttps://learnsentinel.blog/home/2021-12-26T02:28:17+00:00weekly0.6https://learnsentinel.blog/2021/12/16/microsoft-sentinel-and-the-power-of-functions/https://learnsentinel.blog/wp-content/uploads/2021/12/sentinel-logo.pngsentinel logo2021-12-25T22:23:14+00:00monthlyhttps://learnsentinel.blog/2021/12/01/using-logic-apps-and-microsoft-sentinel-to-alert-on-expiring-azure-ad-secrets/2021-12-01T01:31:26+00:00monthlyhttps://learnsentinel.blog/2021/11/25/detecting-multistage-attacks-in-microsoft-sentinel/2021-11-25T04:01:43+00:00monthlyhttps://learnsentinel.blog/2021/11/04/keep-an-eye-on-your-azure-ad-guests-with-microsoft-sentinel/2021-11-04T10:03:57+00:00monthlyhttps://learnsentinel.blog/2021/09/02/azure-sentinel-and-azure-ad-conditional-access-cloud-fail2ban/2021-10-19T19:35:14+00:00monthlyhttps://learnsentinel.blog/2021/10/19/defending-azure-active-directory-with-azure-sentinel/2021-10-19T05:13:12+00:00monthlyhttps://learnsentinel.blog/2021/10/07/reset-your-on-premise-passwords-with-azure-sentinel-azure-ad-connect-writeback/2021-10-07T07:38:56+00:00monthlyhttps://learnsentinel.blog/2021/10/04/using-logic-apps-to-version-control-your-azure-ad-conditional-access-policies/2021-10-04T06:10:32+00:00monthlyhttps://learnsentinel.blog/2021/10/01/using-time-to-your-advantage-in-azure-sentinel/2021-10-01T00:20:29+00:00monthlyhttps://learnsentinel.blog/2021/09/09/protecting-azure-key-vault-with-azure-sentinel/2021-09-09T07:40:19+00:00monthlyhttps://learnsentinel.blog/2021/08/30/azure-sentinel-and-the-story-of-a-very-persistent-attacker/2021-09-03T02:57:38+00:00monthlyhttps://learnsentinel.blog/2021/08/19/crowdstrike-falcon-defender-for-endpoint-and-azure-sentinel/2021-11-17T07:40:48+00:00monthlyhttps://learnsentinel.blog/2021/08/13/detecting-anomalies-unique-to-your-environment-with-azure-sentinel/2021-08-13T02:10:30+00:00monthlyhttps://learnsentinel.blog/2021/08/05/streaming-azure-ad-risk-events-to-azure-sentinel/2022-12-22T09:21:03+00:00monthlyhttps://learnsentinel.blog/2021/07/29/supercharge-your-queries-with-azure-sentinel-uebas-identityinfo-table/2022-05-23T12:17:39+00:00monthlyhttps://learnsentinel.blog/2021/07/26/enforce-pim-compliance-with-azure-sentinel-and-playbooks/2022-03-28T10:25:11+00:00monthlyhttps://learnsentinel.blog/2021/07/20/monitoring-oauth-applications-with-azure-sentinel-2/2021-07-20T00:59:16+00:00monthlyhttps://learnsentinel.blog/2021/07/16/cloud-app-security-azure-ad-identity-protection-help/2021-07-19T08:55:16+00:00monthlyhttps://learnsentinel.blog/2021/07/14/use-ms-graph-and-sentinel-to-create-dynamic-watchlists/2021-07-19T10:12:22+00:00monthlyhttps://learnsentinel.blog/2021/07/08/join-lookup-and-union-your-way-to-unified-identity-in-sentinel/2021-07-07T23:29:31+00:00monthlyhttps://learnsentinel.blog/2021/07/03/azuread-duo/2021-07-06T23:34:53+00:00monthlyhttps://learnsentinel.blog/2021/07/06/using-sentinel-to-automatically-respond-to-identity-alerts/2021-07-06T08:16:58+00:00monthlyhttps://learnsentinel.blog/2021/07/04/enrich-hunting-with-data-from-ms-graph-and-azure-ad/2021-07-05T04:34:53+00:00monthlyhttps://learnsentinel.blogdaily1.02023-05-19T12:13:45+00:00