KQL for Sentinel, hunting, workbooks and notebooks
The KQL operators a security engineer actually uses in Sentinel, the tables worth knowing, ASIM parsers, functions, the hunting blade, workbooks, notebooks, query cost and performance, search jobs and restore, with 15 ready-to-paste queries.