iiinova — where your digital self keeps evolving

KQLCafe

@kqlcafe.bsky.social

A Community to make the world a better place with KQL | Learn, share and practice the KQL language #KQL #Security #ThreatHunting #LogAnalytics #DataExplorer kqlcafe.com

Posts Replies Media

KQLCafe @kqlcafe.bsky.social · 19/10/2025

Countdown to #KustoCon youtu.be/VQI9WgG--Xs?...

youtu.be

KustoCon 2025

YouTube video by KQL Cafe

000

KQLCafe @kqlcafe.bsky.social · 02/06/2025

🎉 KustoCon 2025 is official! Watch the announcement video and register now for the main event or join us onsite in Zurich for also the hands-on detection engineering workshop! Info & sign-up: kustocon.com/sessions/ #KustoCon #KQL #KustoFans

kustocon.com

Sessions | KustoConEvent Timetable

011

Reposted by KQLCafe

Alex Verboon @vacyber.bsky.social · 24/02/2025

Interested to learn more about Azure Fabric? Join us at the KQLCafe tomorrow Tuesday February 25, 18:00 CET with guest speaker Uri Barash More information and registration here: kqlcafe.com#upcoming-shows #kql #AzureFabric #Kusto

kqlcafe.com

KQL Cafe

If you'd like to share your query with the community, feel free to share it via kqlsearch.com Submit Query

021

Reposted by KQLCafe

Alex Verboon @vacyber.bsky.social · 22/01/2025

Microsoft is retiring the MFA Fraud alert in favor of the replacement feature "Report Suspicious Activity" here's a KQL query to detect these events. github.com/alexverboon/... #KQL #EntraID #mvpbuzz #MFA

github.com

031

Reposted by KQLCafe

Alex Verboon @vacyber.bsky.social · 22/01/2025

[New KQL Query] Detect changes to Microsoft Entra ID Self Service Password Reset configuration settings github.com/alexverboon/... #KQL #EntraID #SSPR #mvpbuzz

github.com

121

Reposted by KQLCafe

securityaura.bsky.social @securityaura.bsky.social · 19/01/2025

#100DaysOfKQL Day 18 - Unique DLL With Low Prevalence Loaded From Commonly Abused Folder Could probably still be fine-tuned further, but it should detect campaigns/malware such as the ones listed in the Description. May also find unwanted software 👀 github.com/SecurityAura...

github.com

011

KQLCafe @kqlcafe.bsky.social · 02/12/2024

Hello #KQL Fans & Geeks, We are taking a short break, but we'll be back in January 2025. Check out our lineup of guest speakers here: kqlcafe.com#our-mission And in case you missed it, the KustoCon Conference session recordings are available now. kqlcafe.com/KustoCon/Kus...

052

Reposted by KQLCafe

BertJanCyber @bertjancyber.bsky.social · 02/12/2024

Time to get a #KQL query from the shelve: Potential Adversary in the middle Phishing If you have High-Risk users and axios useragents in the results please revoke some sessions. 🏹 github.com/Bert-JanP/Hu... Query is available for both SigninLogs and AADSignInEventsBeta.

github.com

062

KQLCafe @kqlcafe.bsky.social · 26/11/2024

🚀 Relive KustoCon 2024! 🧠🌐 Our 6 expert-led sessions are now available for you to watch on-demand. Dive into the latest KQL insights from top community experts. 📹 👉 Watch here: lnkd.in/edeRJQtd

lnkd.in

This link will take you to a page that’s not on LinkedIn

011

KQLCafe @kqlcafe.bsky.social · 18/11/2024

Do you like #KQL ? Then follow us here and check out our monthly meetup schdule kqlcafe.com #mvpbuzz #Community #Learn #Share #Practice #KQL #KustoQueryLanguage

041