← Blog // TAG

KQL

1 article

Detecting DNS Tunneling with KQL in Microsoft Sentinel Three KQL signals (entropy, volume and record types) to hunt DNS exfiltration and C2, and how to turn them into an anal… Read →