/kql-for-dfir

A guide to using Azure Data Explorer and KQL for DFIR