Hands On: Kusto Query Language(Kql)

[LeeAndro]

Published 11/2022MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHzLanguage: English | Size: 1.53 GB | Duration: 2h 29m

Learn KQL to excel in you Sentinel, Log Analytics, ADX Defender for Cloud journey.​

What you'll learn
Understand What Kusto Query Language and where it is used
Understand Kusto Query Language Commands, Statement, Clause
Combining all Commands, Statements for a Use Case based understanding
Learn how to leverage Sentinel, MDC & Log Analytics Effectively

Requirements
Zeal to learn KQL

Description
In this Hands On: Kusto Query Language course we will do hands on KQL and understand various Commands, Clauses, Statements to build a good Foundation.KQL has many Applications Across Microsoft Sentinel, Micrsoft Defender for Cloud, Azure Data Explorer and it enables in Querying the Data which is Stored in Log Analytics Workspace.We Will start from Portal Walkthrough provisioned by MS for practicing KQL effectively, we will start with basic commands like getSchema, let, print, and will reach to complex aspect of join, union, data tables, mv-expand, Aggregate functions.We will understand case-sensitive and case-insensitive aspect of KQL and how commands can be Molded respectively for querying data from Log Analytics.Kusto Query Language is a powerful tool to explore your data and discover patterns, identify anomalies and outliers, create statistical modeling, and more. The query uses schema entities that are organized in a hierarchy similar to SQL's: databases, tables, and columns.A Kusto query is a read-only request to process data and return results. The request is stated in plain text, using a data-flow model that is easy to read, author, and automate. Kusto queries are made of one or more query statements.Brief on What we will do Hands on KQL in this Course:1. Kusto Query Language2. KQL LA demo Continued( Schema, Workflow of a Query, Pipe Operator)3. KQL Operator Search4. KQL Operator Where5. KQL Operator distinct,summarize6. KQL Operator sort,ago7. KQL Operator iif,strcat,case8. KQL Operator arg_max,arg_min,Count,mv-expand9. KQL Operator join,range,union,Custom log creation10.Kusto Rookie11. Updating..

Overview
Section 1: Introduction

Lecture 1 Introduction

Lecture 2 2. KQL LA demo Continued (Schema, Workflow of a Query, Pipe Operator)

Section 2: KQL Operators

Lecture 3 KQL Operator _ Search

Lecture 4 KQL Operator _Where

Lecture 5 KQL Operator Distinct, Summarize Other

Lecture 6 KQL Operator Sort, Ago & Other

Lecture 7 KQL Operator iif,strcat,case

Lecture 8 KQL Operator arg_max,arg_min,Count,mv-expand

Lecture 9 KQL Operator join,range,union,Custom log creation

Section 3: Kusto Detective

Lecture 10 What's Expected from you

Lecture 11 Kusto Detective & Introduction

Lecture 12 Kusto Lieutenant

Cloud Security,Microsoft SIEM & SOAR,SOC Eeers

HomePage:

https://www.udemy.com/course/hands-on-kusto-query-languagekql/

DOWNLOAD

https://1dl.net/0ryzyb6iuds8/IC9GpDiL__Hands_On_K.part1.rar.html
https://1dl.net/29xt7cp17n0b/IC9GpDiL__Hands_On_K.part2.rar.html