💥Highlights from my #KQL talk @Grayhat_Con @BlueTeamVillage in case you missed
📌Slides :
github.com/ashwin-patil/b…
📌GitHub - KQL Queries:
github.com/ashwin-patil/b…
🧵👇
📌Slides :
github.com/ashwin-patil/b…
📌GitHub - KQL Queries:
github.com/ashwin-patil/b…
🧵👇
https://twitter.com/ashwinpatil/status/1322223122712416256
🤔 Why you should learn Query language ? 
Multiple Products - Varying KQL Support.
👀Always check documentation for support
docs.microsoft.com/en-us/azure/az…
👀Always check documentation for support
docs.microsoft.com/en-us/azure/az…
Structure of Basic KQL Query
Query Parameterization:
Dynamic Datatypes - Become a KQL power user by knowing these data types and operators
😱Leverage Built-in Function before writing own
msticpy- DataProvider Library
📌ReadTheDocs: msticpy.readthedocs.io/en/latest/data…
📌 Splitting Query Execution into Chunks:
msticpy.readthedocs.io/en/latest/data…
📌 Notebook : nbviewer.jupyter.org/github/microso…
📌 Notebook Gif Demo : github.com/ashwin-patil/b…
📌ReadTheDocs: msticpy.readthedocs.io/en/latest/data…
📌 Splitting Query Execution into Chunks:
msticpy.readthedocs.io/en/latest/data…
📌 Notebook : nbviewer.jupyter.org/github/microso…
📌 Notebook Gif Demo : github.com/ashwin-patil/b…
✅KQL Playgrounds
✅KQL Trainings
✅KQL Query Resources
✅KQL Trainings
✅KQL Query Resources
Conclusion
• • •
Missing some Tweet in this thread? You can try to
force a refresh
