Logwatcher’s Zenit #05: Beginner Mistakes in KQLFinding your inner join in a leftouter worldJul 3Jul 3
Logwatcher’s Zenit #04: VS Code for Analysts, part 2Order in chaos is what separates a good analyst from a great one.Jun 26Jun 26
Logwatcher’s Zenit #03: Histogram, the Weight Measurement of LogsBin it. Chart it. Peek at the peaks.Jun 19Jun 19
Logwatcher’s Zenit #02: Simulating Attacks with Atomic Red TeamHow to Validate Your Detection Logic Without Summoning a Real Threat ActorJun 12A response icon1Jun 12A response icon1
SideQuest #01: How To Virtualise SequoiaConverting Install macOS Sequoia.app to an ISO fileJun 2Jun 2
Logwatcher’s Zenit #01: VS Code for Analysts, part 1Here’s how to let your keyboard do the hunting.May 29May 29
