@DebugPrivilege posted some useful docs here;
Update: this seems have been updated and moved to here: https://security-tzu.com/2020/08/07/become-a-kql-ninja/
@DebugPrivilege posted some useful docs here;
Update: this seems have been updated and moved to here: https://security-tzu.com/2020/08/07/become-a-kql-ninja/