Detect discovery techniques on windows using KQL

Detect Local Account Discovery Techniques on Windows using KQL and Atomic Red

Hi Medium! Here we are again with a new article about Sentinel, we will talk today about how we can use Atomic Red to run Discovery techniques, and how to use KQL in detecting Local Account Discovery Techniques, I will have different articles on the same topic, so stay tuned 😊

This article will cover the following:

What is Atomic Red?
What is KQL in Sentinel? …

account article azure cyberattack cybersecurity detect discovery kql local medium run security sentinel techniques today windows