Graph-based hunting: Sentinel graph and hunting graphs with blast radius

Tables and Kusto Query Language (KQL) are great for asking which events match a condition, but many security questions are about relationships: which users can reach this storage account, how could a compromised laptop lead to a domain admin, or what would an attacker holding this identity be able to touch. Graphs model data as nodes (users, devices, groups, cloud resources, applications) and edges (relationships such as member of, has permission to, logged on to or can authenticate as). Attackers think in graphs, moving from one foothold to the next, so defenders benefit from doing the same.