ConceptsKusto Query Language
Kusto Query Language
KQL, the query language used to search and analyze data in Microsoft's security and log platforms (such as Sentinel and Defender), letting analysts write detections and investigate by filtering, correlating, and aggregating telemetry.
14 direct links5 lessons
Concept Neighborhood
Related · bigger circles cover more lessons
Start here
Multi-Source Correlation
The most substantial related concept here, covered by 9 lessons.
Related Lessons
5 lessons cover this conceptSIEM Data Models and Log Normalization
SOC Analyst
Aggregation and Statistical Analysis for Threat Detection
SOC Analyst
Time-Series Analysis and Multi-Source Correlation
SOC Analyst
Query Tuning, Lookup Tables, and Production Operations
SOC Analyst
Designing a Detection Program with SIEM Queries
SOC Analyst
Sign in to open lesson content directly.