Using KQL and externaldata() operator to pull infromation from json file...

Logic Apps: How to use create a new watchlist with data (raw content) module...

Count how many elements are in an array created by make_set in kusto language...

KQL: bag unpack json into single row...

How to retrieve information on users and applications vulnerable to risk with API?...

How do I search through the in Sentinel Workbooks stored queries?...

How to create a whitelist with two fields in KQL with a Watchlist?...

KQL: How to reference columns within a let query in the next query...

Logic Apps copy action gives: The managed identity used with this operation no longer exists. To con...

String function not parsing all characters...

Azure Sentinel: Logic App Playbook Code Migration to Another Tenant...

Does using Azure Whois api needs microsoft sentinel to be set up or it can be used stand alone...

KQL: Datetime conversion and use of min and max functions...

Is there a way to change the Playbook Settings in Microsoft Sentinel through Terraform...

KQL query construction with parameters and default values...

Azure Sentinel Incident Trigger in Logic Apps Automation Delay...

How to understand Microsoft Entra application required for log ingestion API...

KQL - How to enrich an event by matching an IP address to an IP range from a Sentinel Watchlist?...

Need help to understand if azure sentinel data connection solution is being built correctly...

TimeGenerated field not taking provided date...

Trying to parse non-uniform JSON arrays with KQL in Sentinel...

Is there a replace multiple / parse unicode in string function?...

How to change/upgrade the microsoft azure function app plan from consumption to premium under micros...

Azure AKS in-container logs to Azure Logs/Azure Sentinel...

Using KQL and externaldata() operator to pull infromation from Azure storage account table...

Azure Sentinel: Be notified when a playbook run fails or playbook action is disconnected...

KQL - Aggregate on latest entry...

KQL: Check table of IPs against table of subnets...

Use KQL query to return a list of column names...

Store variable in Azure logic app to use in next run...