Forum Discussion
Pavan_Gelli1910
Jan 06, 2020Brass Contributor
Storing static data in table to use in KQL
Unable to maintain static/dynamic data sets for below sample use cases. Use Cases: Increase in failed domain admin account logins detected Password change or rest on known privileged accoun...
- Jan 06, 2020
Pavan_Gelli1910 Just saw this timely post on the Azure Sentinel blog page. Could help.
Thijs Lecomte
Jan 06, 2020Bronze Contributor
What I would do in that moment is add the service accounts to a specific group or use a unique attribute and filter your KQL query to that attribute