> For the complete documentation index, see [llms.txt](https://baric6.gitbook.io/barics-knowledge-base/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://baric6.gitbook.io/barics-knowledge-base/development/microsoft-kql/kql-sources.md).

# KQL Sources

## Monitoring and alerting 

{% embed url="<https://securediam.com/f/entra-id-monitoring-and-alerting---are-you-doing-the-basics>" %}

## Tutorial: Create a log search alert for an Azure resource <a href="#tutorial-create-a-log-search-alert-for-an-azure-resource" id="tutorial-create-a-log-search-alert-for-an-azure-resource"></a>

{% embed url="<https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/tutorial-log-alert>" %}

## How to Use KQL and Azure Log Analytics to Inspect Azure AD Sign-in Logs?

{% embed url="<https://emsroute.com/2022/04/18/azuread-kql-1/>" %}