Alex Verboon
banner
vacyber.bsky.social
Alex Verboon
@vacyber.bsky.social
CTO Principal Cyber Security Consultant at @BaseVISION | building cyber defenses to protect the enterprise | Microsoft security MVP | Host of http://KQLCafe.com
KustoCon 2025
YouTube video by KQL Cafe
youtu.be
October 19, 2025 at 8:09 AM
Reposted by Alex Verboon
🎉 KustoCon 2025 is official!

Watch the announcement video and register now for the main event or join us onsite in Zurich for also the hands-on detection engineering workshop!

Info & sign-up: kustocon.com/sessions/

#KustoCon #KQL #KustoFans
Sessions | KustoConEvent Timetable
kustocon.com
June 2, 2025 at 9:25 PM
Use #KQL to identify the use of Portable Apps across your #DefenderforEndpoint devices

github.com/alexverboon/...
April 5, 2025 at 3:06 PM
April 5, 2025 at 2:16 PM
Interested to learn more about Azure Fabric? Join us at the KQLCafe tomorrow Tuesday February 25, 18:00 CET with guest speaker Uri Barash

More information and registration here: kqlcafe.com#upcoming-shows

#kql #AzureFabric #Kusto
KQL Cafe
If you'd like to share your query with the community, feel free to share it via kqlsearch.com Submit Query
kqlcafe.com
February 24, 2025 at 7:13 PM
[Tip!] Still running MMA for Defender for Endpoint on older Windows Servers/Clients? Not sure? Then check out these queries:

github.com/alexverboon/...

#DefenderForEndpoint #Security #StayCurrent
February 5, 2025 at 9:48 PM
January 26, 2025 at 1:39 PM
My previous MCAS Toolbox was last updated in 2021, and meanwhile we have new APIs so here' a first updated set of PowerShell scripts to manage Defender for Cloud Apps github.com/alexverboon/De…#mcasa#powershelll#mvpubzzz#Securityty
https://github.com/alexverboon/De…
January 25, 2025 at 10:13 PM
[New KQL Query] Detect changes to Microsoft Entra ID Self Service Password Reset configuration settings

github.com/alexverboon/...

#KQL #EntraID #SSPR #mvpbuzz
github.com
January 22, 2025 at 7:58 PM
Microsoft is retiring the MFA Fraud alert in favor of the replacement feature "Report Suspicious Activity" here's a KQL query to detect these events.
github.com/alexverboon/...

#KQL #EntraID #mvpbuzz #MFA
github.com
January 22, 2025 at 7:58 PM
Get all Azure DevOps Security Code & Infrastructure as code recommendations with #KQL
github.com/alexverboon/...
#kql #AzureDevOpsSecurity #CodeAnalysis
December 9, 2024 at 8:01 PM
Reposted by Alex Verboon
Hello #KQL Fans & Geeks,

We are taking a short break, but we'll be back in January 2025. Check out our lineup of guest speakers here: kqlcafe.com#our-mission

And in case you missed it, the KustoCon Conference session recordings are available now. kqlcafe.com/KustoCon/Kus...
December 2, 2024 at 11:15 PM
Reposted by Alex Verboon
🚀 Relive KustoCon 2024! 🧠🌐 Our 6 expert-led sessions are now available for you to watch on-demand. Dive into the latest KQL insights from top community experts. 📹

👉 Watch here: lnkd.in/edeRJQtd
LinkedIn
This link will take you to a page that’s not on LinkedIn
lnkd.in
November 26, 2024 at 6:48 PM
Today I created a few KQL queries to detect AzureDevOps - Organization Settings changes.

github.com/alexverboon/...

#KQL #AzureDevOps #Security #Sentinel
November 18, 2024 at 9:54 PM