Hello

Hey, I’m Liam.

I’m currently a Principal Security Researcher at Microsoft Security Research (MSecR), where I work on R&D related to Threat Intelligence and Detection for Microsoft Defender for Endpoint (EDR) and Windows Defender Antivirus.

This site collects together various artefacts from unofficial projects, thoughts and hobbies that I’ve accumulated over the years 🙂

• 2023-04-22
  KQL self-join pattern
• 2023-04-10
  Data exploration with KQL `externaldata`