Awesome Kusto Query Language (KQL)
-
Updated
Aug 16, 2026
Awesome Kusto Query Language (KQL)
SOC Phishing Email Investigation & Automated Response using Microsoft Sentinel, KQL, MITRE ATT&CK and SOAR
Custom detection rules for Splunk, Microsoft Sentinel and Google Chronicle — mapped to MITRE ATT&CK
Add a description, image, and links to the kql-siem topic page so that developers can more easily learn about it.
To associate your repository with the kql-siem topic, visit your repo's landing page and select "manage topics."