↳ GitHub sourceWorkbook

Advanced KQL for Microsoft Sentinel

Description

This interactive Workbook is designed to improve your KQL proficiency by using a use-case driven approach.
Version
1.3.0
Declared author / publisher
Microsoft Sentinel Community

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
AdvancedKQL
Additional source files 2Workbooks/AdvancedKQL.jsonsource ↗Workbooks/WorkbooksMetadata.jsonworkbook-metadata ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.