kql 2 Evaluating our Threat Hunting Detection Rules (+ KQL Query Evaluation) May 4, 2026 Threat Hunting via InternetMessageId (+ KQL Queries) Apr 21, 2026