New Enterprise exclusive Sherlock: GuestofHonor

Get ready to learn hands-on KQL fundamentals in Microsoft Sentinel.

Build threat hunting and incident response skills for Microsoft Sentinel with GuestofHonor, an Easy Sherlock focused on investigating a cloud identity compromise.

New to Kusto Query Language (KQL)? This beginner-friendly HTB Enterprise scenario teaches you the language through an investigation of a Microsoft Entra ID compromise, helping you build foundational query skills for investigations in Microsoft Sentinel.