Azure Sentinel new blogs!

%3CLINGO-SUB%20id%3D%22lingo-sub-1364992%22%20slang%3D%22en-US%22%3EAzure%20Sentinel%20new%20blogs!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1364992%22%20slang%3D%22en-US%22%3E%3CP%3ETwo%20new%20great%20blogs%20on%20Azure%20Sentinel%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fsecureinfra.blog%2F2020%2F04%2F28%2Ftips-for-kql-data-sampling-as-part-of-azure-sentinel-investigations%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3ETips%20for%20KQL%20Data%20Sampling%20as%20part%20of%20Azure%20Sentinel%20Investigations%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fsecureinfra.blog%2F2020%2F05%2F06%2Fazure-sentinel-tip-for-table-details-and-descriptions%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAzure%20Sentinel%20Tip%20for%20Table%20Details%20and%20Descriptions%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHope%20you'll%20enjoy%20them!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1364992%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Sentinel%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EInvestigations%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ekql%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1378480%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Sentinel%20new%20blogs!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1378480%22%20slang%3D%22en-US%22%3Egreat%20article.%20one%20tip%20is%20to%20give%20an%20example%20of%20when%20you%20would%20use%20%22take%22%20instead%20of%20%22limit.%22%3CBR%20%2F%3EYour%20article%20says%20they%20are%20similar%20but%20doesn't%20define%20how%2Fwhen%2Fwhy%20you%20would%20use%20one%20instead%20of%20the%20other.%20Thanks!%3C%2FLINGO-BODY%3E
Microsoft

Two new great blogs on Azure Sentinel:

 

 

Hope you'll enjoy them!

 

 

 

1 Reply
great article. one tip is to give an example of when you would use "take" instead of "limit."
Your article says they are similar but doesn't define how/when/why you would use one instead of the other. Thanks!