New Blog Post | Intro to KQL Workbook - Summer Update

Microsoft

tarrask-malware-featured-image-440x268.jpg

Intro to KQL Workbook - Summer Update - Microsoft Tech Community

 

To keep the learning going, the Intro to KQL interactive workbook has been updated with more content. This content introduces 15 new operators for:

  • Strings
  • Anomalies
  • Miscellaneous Uses

Additionally, this update introduces ways for users to add their own exercises and data for learning and testing.

 

New Content

Strings

  • Strcat
  • Extract
  • Split
  • Substring
  • Parse

Anomaly

  • Materialize
  • Basket
  • Diffpatterns
  • Autocluster
  • Make-series

Miscellaneous

  • Getschema
  • isBillable
  • BilledSize
  • isEmpty
  • User Function

 

0 Replies