Understanding Azure Sentinel + KQL | Matt Zorich on Cloud Conversations | Ep 43

Matt Zorich is a Principal Cyber Security Operations Specialist who runs the Learn Sentinel blog and is currently taking followers through the '365 days of KQL' hashtag on Twitter.  He's a KQL guru and sharing his wisdom with the community in a big way.  He joins Ru and Pete in this episode to talk about... • How 365 days of KQL started • What makes Sentinel so valuable • Do you need Sentinel if you have Microsoft 365 Defender with advanced hunting? • Recommendations for folks getting into Sentinel / KQL - advice, lessons learned, etc • The gateway/path from "normal" IT to security specialist? Connect with Matt online: Twitter: https://twitter.com/reprise_99 LinkedIn: https://www.linkedin.com/in/matthewzorich  Blog: https://learnsentinel.blog/blog GitHub: https://github.com/reprise99 Follow us on Twitter: Azure: https://twitter.com/amac_ncheese Kat: https://twitter.com/GreenanKat Pete: https://twitter.com/M365Rising Ru: https://twitter.com/rucam365 The show: https://twitter.com/CloudCons365 Connect with us on LinkedIn: Azure: https://www.linkedin.com/in/azuremcfarlane Kat: https://www.linkedin.com/in/kat-greenan-ba212a18 Pete: https://www.linkedin.com/in/peterrising Ru: https://www.linkedin.com/in/rlcam Check out our blogs: Azure:  Kat: https://collabwithkat.com Pete: https://www.peterrising.co.uk Ru: https://campbell.scot Buy Pete's books! MS-500 Exam Guide (UK): https://www.amazon.co.uk/dp/1838983120 MS-700 Exam Guide (UK): https://www.amazon.co.uk/dp/1801071004 MS-500 Exam Guide (USA): https://www.amazon.com/dp/1838983120 MS-700 Exam Guide (USA): https://www.amazon.com/dp/1801071004