📢 Guardians of the Cloud , Episode 2 🎯

Guardians of the Cloud is a multi-episode Azure Qatar Community security series exploring the Microsoft security stack and how to defend modern cloud environments, one mission at a time.

The story so far:

In Episode 1: The Watchtower, we explored Microsoft Sentinel as the foundation of a modern SOC , how to collect the right data, design your workspace, and gain visibility across your environment and align with Content is also aligned with the Qatar Cybersecurity Framework (QCF).

Now in Episode 2, we take the next step: detection and response. Once you can see, the real work begins, turning data into detections, investigating incidents, and hunting threats.
📌 Episode 2: The Hunter
Detection and Response using KQL (Microsoft Sentinel and XDR)

👨‍💻 Speaker: Predrag (Peter) Petrovic – AI Cybersecurity Cloud Solution Architect @ Microsoft

🗓 Wednesday, May 13, 2026

🕡 6:30 PM – 8:00 PM

📍 Microsoft Qatar, 27th Floor, Burj Fardan Tower, Lusail
📺 Live streamed on: youtube.com/@AzureQatarCommunity
What we’ll cover:
✔ KQL Fundamentals — Get comfortable with Kusto Query Language, the language behind every query, detection, and hunt in Sentinel and Defender XDR.
✔ Understanding incidents and alerts — Learn the difference between an alert and an incident, how they’re generated, and how analysts triage them in the unified Defender portal.
✔ Building your first detection rule — Walk through creating an analytics rule from scratch, from query logic to alert configuration.
✔ Understanding indicators of compromise (IOCs) — Explore what IOCs are, how threat intelligence feeds them into Sentinel, and how to use them to detect known threats.
✔ Advanced detection using Summary Rules and Jupyter Notebooks — Go beyond the basics with Summary Rules for cost-efficient detection at scale and Jupyter Notebooks for deep, data-driven threat hunting.
The session will include live demonstrations and an open Q&A.
🎯 Who should attend
• Security analysts and SOC engineers
• Sentinel and Defender XDR users looking to deepen their skills
• Cloud and infrastructure professionals involved in detection and response
• Anyone interested in building practical KQL and threat detection capabilities
⚠️ In-person seats are very limited , priority for cyber security professionals and people working in the field. Everyone else, join us live on YouTube 📺
👉 Register: events.azureqatar.org/hunting