Search ATT&CK techniques, review starter KQL, and compare which telemetry sources fit each example.
⚠️ Examples are illustrative — tune for your environment before production use. See each technique's caveat.