Suggestions
Mark Morowczynski
Principal Program Manager at Microsoft, CISSP, CCSP, GWAPT, GCIH, GCIA, GCWN, GMOB, GCTI, GPEN, GCUX, GPYC, GMON, GXPN, GDAT, GREM
Mark Morowczynski is a Principal Security Researcher at Microsoft.1 He is on the Identity Customer Success Team, focusing on Azure Active Directory.1 He is also a blogger, speaker, and baseball enthusiast.3
Experience:
- Principal Product Manager at Microsoft: Since March 2018, Redmond, Washington1
- Senior Product Manager at Microsoft: June 2015 – March 2018, Redmond, Washington, focusing on Azure Active Directory1
- Senior Premier Field Engineer at Microsoft: August 2013 – June 2015, Chicago, Platforms Team1
- Premier Field Engineer at Microsoft: November 2010 – August 2013, Platforms Team1
- Senior Systems Engineer at DePaul University: June 2007 – October 20101
- Systems Administrator at DePaul University: September 2005 – June 20071
Education:
- SANS Technology Institute: Master of Science, Information Security Engineering (2018-2022)1
- DePaul University - Charles H. Kellstadt Graduate School of Business: MBA, Leadership/Entrepreneurship (2009 - 2014)1
- DePaul University: MS, Computer Information and Network Security (2006 – 2007)1
- DePaul University: BS, Computer Science (2002 – 2006)1
Morowczynski can be found on Twitter as @markmorow, where he tweets about baseball and makes GIFs.2
Highlights
The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting, is officially 'done done'. It's off to the printers and the expected ship date is near the end of May or early June. Rod Trent, Matthew Zorich, Corissa K. & I have made sure all the KQL queries in the book and more are available fore free in the GitHub repo, which we've now flipped to being public. https://lnkd.in/dXkeqVcc.
If you want the context of why or how a query is approached a specific way that is all in the book. As part of the launch we have worked with Pearson Digital & Technology to work out a promotion for anyone that pre-orders the book. If you use the promo code KUSTO at checkout you can get 30% off either the book or eBook version.
Run these queries in your environment. Look at the results and continue to improve your defenses. If you find something and fix something let us know either the next time you see one of us four at an event or always digitally. If you've purchased the book and it helped you improve your KQL skills we'd love to hear that as well and please recommend it to fellow professionals.
