Microsoft Sentinel - the whys of KQL

Hi,

I'm a recent grad who has joined a large Fortune500 company as a cybersecurity junior. Day to day, my main focus is going to be on monitoring Sentinel, but long-term they are expecting me to become guru like. Seeing I have a masters in Comp Sci, that's reasonable.

I don't mind this - they have low short and medium term expectations (respond to existing rules and alerts for the forseeable) but long-term (3+ years) I really want to get …

alerts cybersecurity don focus joined kql large low main masters medium microsoft microsoft sentinel monitoring respond rules sentinel