SØG - mellem flere end 8 millioner bøger:
Viser: The Definitive Guide to KQL - Using Kusto Query Language for Operations, Defending, and Threat Hunting
The Definitive Guide to KQL
Using Kusto Query Language for Operations, Defending, and Threat Hunting
Mark Morowczynski, Rod Trent og Matthew Zorich
(2024)
Sprog: Engelsk
Microsoft Press
368,00 kr.
ikke på lager, Bestil nu og få den leveret
om ca. 12 hverdage
om ca. 12 hverdage
Detaljer om varen
- Paperback: 480 sider
- Udgiver: Microsoft Press (Juni 2024)
- Forfattere: Mark Morowczynski, Rod Trent og Matthew Zorich
- ISBN: 9780138293383
Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk assessment and remediation, speeding up detection time while reducing manual work using KQL. This accessible and practical guide--designed for a broad range of people with varying experience in KQL--will quickly make KQL second nature for information security.
Solve real problems with Kusto Query Language-- and build your competitive advantage:
- Learn the fundamentals of KQL--what it is and where it is used
- Examine the anatomy of a KQL query
- Understand why data summation and aggregation is important
- See examples of data summation, including count, countif, and dcount
- Learn the benefits of moving from raw data ingestion to a more automated approach for security operations
- Unlock how to write efficient and effective queries
- Work with advanced KQL operators, advanced data strings, and multivalued strings
- Explore KQL for day-to-day admin tasks, performance, and troubleshooting
- Use KQL across Azure, including app services and function apps
- Delve into defending and threat hunting using KQL
- Recognize indicators of compromise and anomaly detection
- Learn to access and contribute to hunting queries via GitHub and workbooks via Microsoft Entra ID
Foreword by Ann Johnson
CHAPTER 1 Introduction and Fundamentals
CHAPTER 2 Data Aggregation
CHAPTER 3 Unlocking Insights with Advanced KQL Operators
CHAPTER 4 Operational Excellence with KQL
CHAPTER 5 KQL for Cybersecurity--Defending and Threat Hunting
CHAPTER 6 Advanced KQL Cybersecurity Use Cases and Operators
CHAPTER 1 Introduction and Fundamentals
CHAPTER 2 Data Aggregation
CHAPTER 3 Unlocking Insights with Advanced KQL Operators
CHAPTER 4 Operational Excellence with KQL
CHAPTER 5 KQL for Cybersecurity--Defending and Threat Hunting
CHAPTER 6 Advanced KQL Cybersecurity Use Cases and Operators
De oplyste priser er inkl. moms
Butikker og åbningstid
Handler du som firma
Forretningsbetingelser
Porto og forsendelse
Data & cookiepolitik
Handler du som firma
Forretningsbetingelser
Porto og forsendelse
Data & cookiepolitik
Find pensumliste
FAQ for studerende
Pensumlistegaranti
Sortiment og levering
Kompendier(for undervisere)
FAQ for studerende
Pensumlistegaranti
Sortiment og levering
Kompendier(for undervisere)
Polyteknisk Boghandel og Forlag A/S - Anker Engelundsvej 1 - 2800 Lyngby
Tlf 77 42 43 44 - email poly@polyteknisk.dk - CVR 34072655 - Sydbank Reg: 6748 Konto 0001107927
Tlf 77 42 43 44 - email poly@polyteknisk.dk - CVR 34072655 - Sydbank Reg: 6748 Konto 0001107927