KQL : A Gateway To Microsoft Sentinel

by Samik Roy

Welcome to A Gateway to Microsoft Sentinel. KQL is a simple query language used across multiple products likeAzure Log Analytics,Microsoft Sentinel,Azure Resource Graphto readstructured &unstructured data.In this book, we will be focusing on how to get started with KQL while we are using Microsoft Sentinel. With the help of this book, you will have a basic understanding of Kusto Query Language and learn a framework to build your own queries. This is written as a reference for you to start writing and continue to evolve your KQL queries. The building block explained areQuick Start

Go for a quick result

Filter for better results

Leverage the joins

Summarize for perspective

Save & Reuse

Apply the visual

Build the use case

This book will be myth buster on your KQL journey.

150 pages, Kindle Edition

Published November 1, 2023

Reviews

[Oleksandr · Rating 3 out of 5]

Good way to learn about KQL.