Just inherited a sentinel tenant, done some KQL in the past but not much mostly just admin'd the service, but a fair bit of MQL in trellix. Wondering if anyone has found some good resources for learning kql? Thanks