← Blog // TAG

KQL

1 article

Detecting DNS Tunneling with KQL in Microsoft Sentinel Three KQL signals (long, varied subdomains, volume and record types) to hunt DNS exfiltration and C2, and how to turn t… Read →