Storing static data in table to use in KQL

Unable to maintain static/dynamic data sets for below sample use cases. Use Cases: Increase in failed domain admin account logins detected Password change or rest on known privileged accoun...

KQL

GaryBushey
Jan 06, 2020
Pavan_Gelli1910 Just saw this timely post on the Azure Sentinel blog page. Could help.

https://techcommunity.microsoft.com/t5/azure-sentinel/implementing-lookups-in-azure-sentinel-part-1-reference-files/ba-p/1091306

GaryBushey

Bronze Contributor

Jan 06, 2020

Pavan_Gelli1910 Just saw this timely post on the Azure Sentinel blog page. Could help.

https://techcommunity.microsoft.com/t5/azure-sentinel/implementing-lookups-in-azure-sentinel-part-1-reference-files/ba-p/1091306

Pavan_Gelli1910

Brass Contributor

Jan 07, 2020

This is really the best article to address my ask. Thanks

Forum Discussion

Storing static data in table to use in KQL

Resources