osquery Part 1 Why getting OS logs is not good enough

A QRadar facelift.

Where do I need Regex in QRadar

isnotempty and isnotnull functions

Searching ipv4 addresses

multi value mv expand operator

Let us test what we have learned

Some Time Functions

events and events_all

KQL Tutorial: Example1

KQL Tutorial: The summarize operator

KQL Tutorial: The where operator

KQL Tutorial: Introduction

Where did the Log Source Management App go?

Leveraging Advisor

QNI's Value even in Azure Cloud. ERRATA in the Video Description

Use Case Manager App Updated

Finding Available Rules, A Google Example

One idea on prioritizing rule additions to QRadar

Making API calls from Pulse, Part Three

Rule to write to a Reference Set

Fixing an incomplete parser

Expanding a Parser Part One

QRadar Searches in Six Minutes

Best QRadar Videos (at least mines)