Azure Sentinel KQL Designing and Learning

Mohammed Altamash Khan 2,076 Reputation points
2022-08-04T11:34:37.88+00:00

What is the best resource to learn KQL language in short time. Please share.
Is there a way to download more query pack in portal ? i have only 1 i.e default query pack.

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
986 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Clive Watson 5,716 Reputation points MVP
    2022-08-04T13:02:39.203+00:00
    1 person found this answer helpful.
    0 comments