Skip to main content

#kql

Every article tagged “kql”, newest first.

Articles tagged kql

Three panels of copper, a night-side Earth with city lights, and white marble above the words Now you can query.

Product Updates

Introducing the SOCSimulator Query Tab: Practice KQL in Your Browser

Practice KQL against the logs of a real operation: Windows, Linux and macOS data, nothing to set up. What it does and its limits.

Nicole Dobrovolskyy6 min read
Abstract layered rows of translucent amber panels flowing left to right against a dark background, suggesting data moving through sequential stages

Tutorials

Kusto Query Language (KQL): A SOC Analyst's Practical Tutorial

Kusto Query Language (KQL) is how you query Microsoft Sentinel and Defender XDR logs. Learn to read a KQL query, write one, and run two real triage examples.

Astrid Lindqvist17 min read