The definitive guide to KQL using Kusto Query Language for operations, defending, and threat hunting

Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk...

Full description

Bibliographic Details
Main Authors: Morowczynski, Mark, Trent, Rod (Author), Zorich, Matthew (Author)
Other Authors: Johnson, Ann (writer of foreword)
Format: eBook
Language:English
Published: [Place of publication not identified] Microsoft Press 2024
Edition:[First edition]
Subjects:
Online Access:
Collection: O'Reilly - Collection details see MPG.ReNa
Description
Summary:Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk assessment and remediation, speeding up detection time while reducing manual work using KQL. This accessible and practical guide designed for a broad range of people with varying experience in KQL will quickly make KQL second nature for information security
Item Description:Includes index
Physical Description:480 pages illustrations