A comprehensive Kusto Query Language (KQL) learning repository covering basic syntax to advanced topics, with hands-on exercises, code samples, and resources for data analysis in Azure Data Explorer.
MaxMind Geo and ASN Data for Kusto
Berserk skills for AI coding agents
Open-source security operations center (SOC) lab environment designed for defenders, detection engineers, and security analysts to learn and practice blue team tradecraft in a controlled, reproducible, and fork-friendly setting.
Azure Security Hardening & Monitoring Lab — NSG IP allowlisting, key-only SSH, Log Analytics, KQL detections, and alert rules for brute-force and stale heartbeat.
Operational Hybrid SOC — Microsoft Sentinel + Wazuh + Security Onion | Detection Engineering | Incident Response
Add a description, image, and links to the kql topic page so that developers can more easily learn about it.
To associate your repository with the kql topic, visit your repo's landing page and select "manage topics."