I started learning how to write KQL as soon as I became dissatisfied with my reporting methods in Intune. I started when we could only send diagnostic logs from Intune to a Log Analytics workspace and query this data. It was difficult at first, but it got easier the more I wrote queries. After some time, I started a small project to collect and share queries that anyone could copy and paste. This project has grown significantly and can be found here: KQLSearch.com.| Ugur Koc
Learn how to configure RBAC in Microsoft Security Copilot to control access across Defender, Intune, Entra, and more. Step-by-step guide with best practices.| Mindcore Techblog