Home›Detection Engineering
Vertical
Detection Engineering
Turning telemetry into signal — advanced hunting queries, analytics rules, and cutting the noise.
LIBRARY
KQL Library
Investigation KQL for Sentinel & Defender — copy, run, tune to your tenant. Filterable, and growing.
Open the library → 1 postData connectors & ingestion
Getting sources into Sentinel — connectors, diagnostic settings, DCRs, and the cost of each.
Open section → Series · 3 partsSentinel, end to end
The platform from the ground up — data foundation, detection, and response.
Open series → 3 postsAdvanced hunting (KQL)
Investigation and detection queries in Defender / Sentinel KQL.
Open section → Coming soonSentinel & analytics rules
Baselines, rule design, and ingestion cost.
Open section → Coming soonAlert tuning & noise
Cutting false positives without losing signal.
Open section →