KQL - Category - Cloudbrothers

KQL

2024

EDR Silencers and Beyond: Exploring Methods to Block EDR Communication - Part 1 12-01

You always trust your CSP - Cross Tenant MFA and GDAP 08-23

Find lateral movement paths using KQL Graph semantics 07-08

Protect your users from Device Code Flow abuse 02-27

Anonymous IP address involving Apple iCloud Private Relay 02-04

2023

Detect threats using Microsoft Graph activity logs - Part 2 11-11

Detect threats using Microsoft Graph activity logs - Part 1 10-14

Other Entra ID / Azure AD SignIn errors 08-06

Sync Defender for Cloud Alerts with Sentinel Incidents 07-16

Sentinel Pester Framework 04-01

1
2
3
4