Books
KQL
The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting
Microsoft Defender
Mastering Microsoft 365 Defender
Microsoft Unified XDR and SIEM Solution Handbook
Microsoft Defender for Endpoint
Microsoft Defender for Endpoint in Depth