Example updated and adapted from Mohammad Ghodratigohar's 2022 YouTube tutorial for contemporary Azure Data Explorer (Updated July 2025).
This full notebook is available for download at:
https://github.com/LaurieRhodes/PUBLIC-Scripts/tree/main/Jupyter_ADX
This demonstrates how to integrate Machine Learning into Azure Data Explorer data processing.
I am pleased to share an open-source Model Context Protocol (MCP) server that provides structured access to Microsoft Graph Security APIs for AI assistant integrations.
MCP CLI Go is a command-line tool that lets you connect any AI provider (OpenAI, Anthropic, Gemini, Ollama, etc.) to any MCP server through a single executable.
At under $3,000 AUD monthly, Azure Data Explorer can ingest and maintain 1TB of security data daily for 18 months — a cost-efficiency most security professionals overlook..
DNS logs are a critical resource for a SOC team. They provide forensics for understanding what has been done within an environment and they can be an early warning system for identifying malware and bad actors in the environment.
The challenge of efficiently storing and analyzing massive volumes of security telemetry has long been a pain point for security operations teams.
M-21-31 represents the current expectation for Federal Government Agencies in the United States and Australia.
With my current Security related projects I'm doing a lot of work using Azure's native automation capabilities. It's been a major surprise for me to realise that the wisdom of the majority of Security Providers is to argue for the purchase of XSOAR licenses to provide an automation capability with Microsoft Sentinel when all the tooling for automation has existed in Azure well before Sentinel was a product.
I'm convinced that Security teams within every major organisation will be running Azure Data Explorer (ADX) clusters in the near future.