Tagged: Kusto Query Language

KQL Hero

KQL – The mother of all languages in Azure

KQL, the Kusto Query Language, is used in many Microsoft services, including the Azure and Microsoft Security platforms such as the ATP family.

This post is part of a series of blog posts about KQL. It will provide you the … Read the rest

Identify Forwarding with Kusto

Hunting Mail Forwarding with Azure Sentinel

Do you know what is occurring inside your Exchange environment? Probably no… in a single week, there are hundreds of changes inside Exchange Online by the IT team and some users’ changes. The Hunting Mail Forwarding with Azure Sentinel post … Read the rest

Learn KQL – Logical Operators

A logical operator is a symbol or word used to connect two or more expressions such that the value of the compound expression produced depends only on that of the original expressions and on the meaning of the operator.

In … Read the rest

Learn KQL – Numerical Operators

In numerical analysis, a numerical method is a mathematical tool designed to solve numerical problems. The implementation of a numerical method with an appropriate convergence check-in in a programming language is called a numerical algorithm.

The types int, long, and … Read the rest

Learn Kusto Query Language – String Operators

Kusto Query LanguageĀ  (aka KQL) offers multiple query operators for searching string data types. When working with KQL we’re usually using many commands, whether its from functions through statement and operator.

The following blog-post describes how string terms are indexed, … Read the rest