Technologies explained

Plain-language overviews of 67 products IT professionals work with every day: what each one is, its key features, and where to learn more.

Microsoft Sentinel

Microsoft, Threat detection & response

Cloud-native SIEM and SOAR for collecting, detecting and responding to security events at scale.

Data connectors for Microsoft and third-party sources
Analytics rules and threat intelligence
KQL hunting and workbooks
Playbooks for automated response
Unified operations in the Defender portal

Best for: Central security monitoring for a SOC or MSP.

Guides and scripts Official docs

Kusto Query Language (KQL)

Microsoft, Threat detection & response

The query language behind Sentinel, Defender advanced hunting, Log Analytics and Azure Monitor.

Filter, summarise and join log data
Time-series charts and visuals
Hunting queries and analytics rules
Reusable functions and parsers

Best for: Investigating incidents and building detections.

Guides and scripts Official docs

Product names and logos are trademarks of their respective owners and are used here for identification only. ITwithTariq isn’t affiliated with or endorsed by these vendors.