Visualize Sign-In Failures Due To Conditional Access Policy
Description This KQL query visualization will return the failure types that occur in your tenant that are related to any
Read MoreLearn by building. Master by breaking. Secure by obsession.
Description This KQL query visualization will return the failure types that occur in your tenant that are related to any
Read MoreSecurity Operations Centers (SOCs) are under constant pressure to detect, investigate, and respond to threats in real time. But with
Read MoreDescription This KQL query visualises the top 100 Devices that initiate the most clear text LDAP authentications. You preferably want
Read MoreDescription This KQL query visualizes the daily triggers in MDE or Sentinel in a columnchart. This can give insight into
Read MoreDescription In MDE or Sentinel there are plenty of tables that generate logs, in order to determine which tables ingest
Read MoreDescription This KQL query lists all accounts that have the Global Admin role assigned to their account. If you have
Read MoreDescription This KQL query list all role additions that have been performed in your tenant. See the Microsoft Link for
Read MoreDescription This KQL query lists the top N (based on LatestNChanges) with the longest time between now and their last password
Read MoreDescription This KQL query is aimed to improve the false positive ratio you have in Sentinel. The query list all
Read More