awesome-kql-sentinel
github.com/reprise99/awesome-kql-sentinel ↗A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel
242
GitHub Stars
121
Curated Resources
8
Categories
57 min ago
Last Refreshed
Official LearnOfficial DocsOfficial VideosOfficial BooksOfficial Announcements and ArticlesOfficial Repositories and ToolsOfficial Forums and WebsitesCommunity
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me twitter resources from awesome-kql-sentinel"
Installation instructions →What's inside
Official Learn
Official Announcements and Articles
- Advanced KQL Framework Workbook - Empowering you to become KQL-savvy
Empowering you to become KQL-savvy
- Defending Critical Infrastructure with the Microsoft Sentinel: IT/OT Threat Monitoring Solution
- Get Hands-On KQL Practice with this Microsoft Sentinel Workbook
- How To Align Your Analytics With Time Windows In Azure Sentinel Using KQL (Kusto Query Language)
- Investigating Suspicious Azure Activity with Microsoft Sentinel
- Learning with the Microsoft Sentinel Training Lab
Community
- Alex VerboonTwitter
- alexverboon/MDATP/tree/master/AdvancedHunting (Advanced Hunting)Community Repositories
- ashwin-patil/blue-teaming-with-kqlCommunity Repositories
- Azure Cloud & AI Domain BlogCommunity Tools and Websites
- AzureFunBytes Episode 64 - Building SOC Efficiency with @Azure Sentinel with @rodtrentCommunity Videos
Building SOC Efficiency with @Azure Sentinel with @rodtrent
- Azure Sentinel Lab SeriesCommunity Videos
Official Videos
- Automate Your Microsoft Sentinel Triage Efforts with RiskIQ Threat Intelligence
- Azure Sentinel Webinar: Deep Dive into Azure Sentinel Normalizing Parsers and Normalized Content
- Azure Sentinel webinar: KQL part 1 of 3 - Learn the KQL you need for Azure Sentinel
Learn the KQL you need for Azure Sentinel
- Azure Sentinel webinar: KQL part 2 of 3 - KQL hands-on lab exercises
KQL hands-on lab exercises
- Azure Sentinel webinar: KQL part 3 of 3 - Optimizing Azure Sentinel KQL queries performance
Optimizing Azure Sentinel KQL queries performance
- Azure Sentinel Webinar: The Information Model: Understanding Normalization in Azure Sentinel
Official Repositories and Tools
Official Books
Official Docs
Official Forums and Websites
Showing a sample of 121 resources. View the full list on GitHub →