Microsoft Azure Sentinel: Planning and implementing Microsoft's cloud-native SIEM solution

Microsoft Azure Sentinel: Planning and implementing Microsoft's cloud-native SIEM solution (IT Best Practices - Microsoft Press)

Microsoft Sentinel in Action - Second Edition: Architect, design, implement, and operate Microsoft Sentinel as the core of your security solutions

The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting (Business Skills)