Books
KQL
The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting

Microsoft Defender
Mastering Microsoft 365 Defender

Microsoft Unified XDR and SIEM Solution Handbook

Microsoft Defender for Endpoint
Microsoft Defender for Endpoint in Depth

Microsoft Defender for Identity in Depth

Securing Microsoft 365
