•  Retrait gratuit dans votre magasin Club
  •  7.000.000 titres dans notre catalogue
  •  Payer en toute sécurité
  •  Toujours un magasin près de chez vous     
  •  Retrait gratuit dans votre magasin Club
  •  7.000.000 titres dans notre catalogue
  •  Payer en toute sécurité
  •  Toujours un magasin près de chez vous

The Definitive Guide to KQL

Using Kusto Query Language for Operations, Defending, and Threat Hunting

Mark Morowczynski, Rod Trent, Matthew Zorich
Livre broché | Anglais | Business Skills
55,95 €
+ 111 points
Livraison 1 à 2 semaines
Passer une commande en un clic
Payer en toute sécurité
Livraison en Belgique: 3,99 €
Livraison en magasin gratuite

Description

Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk assessment and remediation, speeding up detection time while reducing manual work using KQL. This accessible and practical guide--designed for a broad range of people with varying experience in KQL--will quickly make KQL second nature for information security.

Solve real problems with Kusto Query Language-- and build your competitive advantage:

  • Learn the fundamentals of KQL--what it is and where it is used
  • Examine the anatomy of a KQL query
  • Understand why data summation and aggregation is important
  • See examples of data summation, including count, countif, and dcount
  • Learn the benefits of moving from raw data ingestion to a more automated approach for security operations
  • Unlock how to write efficient and effective queries
  • Work with advanced KQL operators, advanced data strings, and multivalued strings
  • Explore KQL for day-to-day admin tasks, performance, and troubleshooting
  • Use KQL across Azure, including app services and function apps
  • Delve into defending and threat hunting using KQL
  • Recognize indicators of compromise and anomaly detection
  • Learn to access and contribute to hunting queries via GitHub and workbooks via Microsoft Entra ID

Spécifications

Parties prenantes

Auteur(s) :
Editeur:

Contenu

Nombre de pages :
480
Langue:
Anglais
Collection :

Caractéristiques

EAN:
9780138293383
Date de parution :
24-05-24
Format:
Livre broché
Format numérique:
Trade paperback (VS)
Dimensions :
186 mm x 230 mm
Poids :
839 g

Les avis