Find failed sign-in attempts by user
A starting point for reviewing failed Microsoft Entra sign-ins over a recent time window.
Kusto Query Language
Queries for the work in front of me.
A growing reference of practical KQL patterns, investigations, and notes for working with operational data.
Recent notes
RSS feedUseful links
A practical starting list of documentation, learning resources, and tools for Information Security related work.