Morowczynski, Mark

The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting (Business Skills)

(No reviews yet) Write a Review
ISBN 13:
9780138293383
author:
Morowczynski, Mark
format:
Paperback
publisher:
Addison Wesley
language:
English
Publication Year:
2023
Pages:
480
Dimensions:
23 x 18.6 x 3 centimetres (0.85
Genre:
Computers, Operating Systems, Windows,
Condition:
New
Availability:
Item usually sent within 2 working days
£27.43

Description

Turn raw data from Azure Data Explorer, Azure Monitor, and other Microsoft platforms into actionable intelligence with KQL (Kusto Query Language). This guide helps you automate risk assessment and remediation, speeding up detection time while reducing manual work. You'll learn the fundamentals of KQL, how to write efficient queries, and explore advanced operators and data strings. Discover how to use KQL for day-to-day admin tasks, performance, and troubleshooting across Azure services. The book also covers defending and threat hunting using KQL, including recognizing indicators of compromise and anomaly detection. With this practical guide, you'll quickly become proficient in KQL, making it an essential tool for information security professionals and analysts alike.

View AllClose