Summary and resources

  • 3 minutes

You should have learned how Microsoft Sentinel provides a table to store list data accessible to Kusto Query Language (KQL) queries. And that the Watchlists page in Microsoft Sentinel provides the management options to maintain the lists.

You should now be able to:

  • Create a watchlist with Microsoft Sentinel
  • Use KQL to access the watchlist with Microsoft Sentinel

Learn more

You can learn more by reviewing the following.

Become a Microsoft Sentinel Ninja

Microsoft Tech Community Security Webinars