Summary and resources
You should have learned how Microsoft Sentinel provides a table to store list data accessible to Kusto Query Language (KQL) queries. And that the Watchlists page in Microsoft Sentinel provides the management options to maintain the lists.
You should now be able to:
- Create a watchlist with Microsoft Sentinel
- Use KQL to access the watchlist with Microsoft Sentinel
Learn more
You can learn more by reviewing the following.
Become a Microsoft Sentinel Ninja
Microsoft Tech Community Security Webinars