# KQL Identity-based Attacks

{% embed url="https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/follow-the-breadcrumbs-with-microsoft-ir-amp-mdi-working/ba-p/4089623?utm_content=buffer28019&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer" %}
