KQL Threads

by @jeftek.com

Discussions focused on the Kusto Query Language (KQL) for use in analytics, threat hunting, etc. #kql #kustoquerylanguage BlueskyFeedCreator.com

Pull to refresh
RootGuard Security @rootguardsec.bsky.social · 2h
0

Conditional Access + MFA won’t stop token theft. AiTM phishing (Evilginx) mirrors Entra ID login, captures the real MFA, then steals the ESTSAUTH cookie. Attacker replays it → full access, bypassing CA. Hunt session anomalies (same session jumping device/network), not failed logins. Hunt KQL:

BC TechDays @bctechdays.com · 17d
1

𝗪𝗵𝗮𝘁 𝗛𝗮𝗽𝗽𝗲𝗻𝘀 𝗪𝗵𝗲𝗻 𝗬𝗼𝘂 𝗣𝘂𝘁 𝗮𝗻 𝗔𝗜 𝗔𝗴𝗲𝗻𝘁 𝗼𝗻 𝗕𝗖 𝗧𝗲𝗹𝗲𝗺𝗲𝘁𝗿𝘆? by waldo #BCTechDays 2026 session recording now released! What if an AI agent could investigate your BC telemetry, figure out the right events, generate the KQL and help explain what’s going wrong? 📺 Now available for everyone on mibuso.tv