Blu Raven Academy Blog

Template-2

Your Logs are Lying: How Network Infrastructure Impacts EDR Network Telemetry

Combining datasets efficiently using the KQL union operator for better security analysis.

C2 Beaconing Detection with MDE Aggregated Report Telemetry

Detecting C2 Beaconing using MDE Aggregated Report Telemetry

Advanced KQL for Threat Hunting: Window Functions — Part 2

Sliding window functions can take your threat hunting and detection engineering skills to a next level by eliminating potential false negatives!