Morowczynski, Mark
The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting (Business Skills)
- ISBN 13:
- 9780138293383
- author:
- Morowczynski, Mark
- format:
- Paperback
- publisher:
- Addison Wesley
- language:
- English
- Publication Year:
- 2023
- Pages:
- 480
- Dimensions:
- 23 x 18.6 x 3 centimetres (0.85
- Genre:
- Computers, Operating Systems, Windows,
- Condition:
- New
- Availability:
- Item usually sent within 2 working days
Description
Turn raw data from Azure Data Explorer, Azure Monitor, and other Microsoft platforms into actionable intelligence with KQL (Kusto Query Language). This guide helps you automate risk assessment and remediation, speeding up detection time while reducing manual work. You'll learn the fundamentals of KQL, how to write efficient queries, and explore advanced operators and data strings. Discover how to use KQL for day-to-day admin tasks, performance, and troubleshooting across Azure services. The book also covers defending and threat hunting using KQL, including recognizing indicators of compromise and anomaly detection. With this practical guide, you'll quickly become proficient in KQL, making it an essential tool for information security professionals and analysts alike.