The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting
Language: English
Published by Microsoft Press Jun 2024, 2024
Series: Book 20 of 22 - Business Skills
- Softcover
- New
Condition: New
£ 42.93
Quantity: 2 available
Add to basketItem description from seller
Neuware -'Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk assessment and remediation, speeding up detection time while reducing manual work using KQL. This accessible and practical guide--designed for a broad range of people with varying experience in KQL--will quickly make KQL second nature for information security'--.
Seller Inventory # 9780138293383
- Title
- The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting
- Author
- Mark Morowczynski
- Publisher
- Microsoft Press Jun 2024
- Publication year
- 2024
- Condition
- Neu
- Binding
- Taschenbuch
- Language
- English
- ISBN 10
- 0138293384
- ISBN 13
- 9780138293383
- Item weight
- 858 grams
- Dimensions
- 230x186x26 mm
- Series
- Book 20 of 22: Business Skills
Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk assessment and remediation, speeding up detection time while reducing manual work using KQL. This accessible and practical guide―designed for a broad range of people with varying experience in KQL―will quickly make KQL second nature for information security.
Solve real problems with Kusto Query Language― and build your competitive advantage:
- Learn the fundamentals of KQL―what it is and where it is used
- Examine the anatomy of a KQL query
- Understand why data summation and aggregation is important
- See examples of data summation, including count, countif, and dcount
- Learn the benefits of moving from raw data ingestion to a more automated approach for security operations
- Unlock how to write efficient and effective queries
- Work with advanced KQL operators, advanced data strings, and multivalued strings
- Explore KQL for day-to-day admin tasks, performance, and troubleshooting
- Use KQL across Azure, including app services and function apps
- Delve into defending and threat hunting using KQL
- Recognize indicators of compromise and anomaly detection
- Learn to access and contribute to hunting queries via GitHub and workbooks via Microsoft Entra ID
"Synopsis" may belong to another edition of this title.
About the Author
Mark Morowczynski is a principal product manager on the Security Customer Experience Engineering (CxE) team at Microsoft. He spends most of his time working with customers on their deployments in the Identity and Access Management (IAM) and information security space. He's spoken at various industry events, including Black Hat, Defcon Blue Team Village, Blue Team Con, Microsoft Ignite, and several BSides and SANS Security Summits. He has a BS in computer science, an MS in computer information and network security, and an MBA from DePaul University. He also has a MS in Information Security Engineering from the SANS Technology Institute. He can be found online on Mastodon at @markmorow@infosec.exchange or his website at https://markmorow.com.
Rod Trent is a senior program manager at Microsoft, focused on cybersecurity and AI. He has spoken at many conferences over the past 30-some years and has written several books, including Must Learn KQL: Essential Learning for the Cloud-focused Data Scientist, and thousands of articles. He is a husband, dad, and first-time grandfather. In his spare time (if such a thing does truly exist), you can regularly find him simultaneously watching Six Million Dollar Man episodes and writing KQL queries. Rod can be found on LinkedIn and X (formerly Twitter) at @rodtrent.
Matthew Zorich was born and raised in Australia and works for the Microsoft GHOST team, which provides threat-hunting oversight to many areas of Microsoft. Before that, he worked for the Microsoft Detection and Response Team (DART) and dealt with some of the most complex and largest-scale cybersecurity compromises on the planet. Before joining Microsoft as a full-time employee, he was a Microsoft MVP, ran a blog focused on Microsoft Sentinel, and contributed hundreds of open-source KQL queries to the community. He is a die-hard sports fan, especially the NBA and cricket.
"About the title" may belong to another edition of this title.
Shipping rates from Germany to U.S.A.
| Item | 9 to 30 business days | 8 to 14 business days |
|---|---|---|
| First item | £ 21.93 | £ 27.84 |
Payment methods
- Bank Wire Transfer
- Cash
- Cash on Delivery
- Check
- Paypal
Store description
Die Schreibwaren sind im Büro, in der Schule und Zuhause allgegenwärtig und auch im Computerzeitalter nicht aus dem Alltag wegzudenken. Schreibwaren Wegmann ist Ihr Online Shop für Bürobedarf und Schulbedarf, der das ganze Sortiment an Büromaterial und Schulsachen zu günstigen Preisen online zu kaufen bietet. In unserem ständig wachsendem Angebot im Online Shop führen wir derzeit viele tausend Büroartikel, alles rund um die Schule, Bürotechnik, Büroeinrichtung bis hin zu ausgefallenen Geschenkartikeln und Postkarten, originell oder regional aus der Region Bayerischer Wald, Böhmerwald, Arberland und Zwiesel. Schreibwaren Wegmann ist Ihr Schreibwarengeschäft. Besuchen Sie uns gerne auch persönlich in unserem Schreibwarenladen in Zwiesel am Stadtplatz 6. Wir heißen Sie herzlich willkommen. Unsere Öffnungszeiten im Schreibwarengeschäft: Montag - Freitag : 07.30 - 19.00 Uhr, Samstag 07.30 - 16.00 Uhr. Und natürlich rund um die Uhr, 24/7, im Schreibwaren Online Shop.…
Seller's business information
Metz Wegmann GmbH
Waldbahnstraße 94
Zwiesel, Germany 94227
Terms of sale
Metz Wegmann GmbH
Waldbahnstr. 94
94227 Zwiesel
Deutschland
Tel.: 09922609490
Fax: 09922609491
E-Mail: info@schreibwaren-wegmann.de
Registergericht: Amtsgericht Deggendorf
Registernummer: HRB 5721
Geschäftsführer: Janos Metz
Umsatzsteuer-Identifikationsnummer: DE364194228
Verantwortliche/r i.S.d. § 18 Abs. 2 MStV:
Janos Metz, Stadtplatz 6, 94227 Zwiesel
Zuständige Aufsichtsbehörde für das Angebot audiovisueller Mediendienste:
Bayerische Landeszentrale für neue Medien (BLM), Heinrich-Lübke-Straße 27, 81737 München, Deutschland
Wir sind zur Teilnahme an einem Streitbeilegungsverfahren vor einer Verbraucherschlichtungsstelle weder verpflichtet noch bereit.
Betriebsstätte:
Stadtplatz 6
94227 Zwiesel
Deutschland
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to Wegmann1855, Zwiesel, Germany, +49 22609490, without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.