I will review and harden your kql or security automation scripts
Cyber Security Engineer for Azure Automation and KQL
About this Gig
Got KQL queries or security automation scripts you're not 100% confident in?
I'll review them for correctness, performance, and reliability.
What I offer:
- Review of KQL queries for Microsoft Sentinel / Defender XDR
- Performance optimization (proper filtering, indexed operators)
- Identifying logic errors or false-positive risks
- Suggestions for hardening automation scripts
I currently work as a Security Consultant/Engineer building production security automation - I know what breaks in real environments.
Cloud provider:
Microsoft Azure
Cloud computing resource:
Security Groups
Other Cloud Computing Services I Offer
FAQ
Do you need access to my Sentinel/Defender environment?
Not necessarily - if you send me the query text or script directly, I can review it standalone. Live access is only needed if you want me to test it in your environment.
What if my query has multiple issues?
I'll flag all of them, prioritized by impact (correctness issues first, then performance).
Can you write a new query instead of just reviewing?
Yes, just message me first - I can write a new KQL query from scratch as well, this gig is just focused on reviewing existing ones.
Do you cover Microsoft Sentinel and Defender XDR both?
Yes, both, since they share the KQL query language and many table schemas.

