Introduction

In Episode 260, Ben and Scott talk about how to get started with KQL, or Kusto Query Language across a number of Azure and Microsoft 365 services, including Azure Monitor, Azure Data Explorer, the Azure Resources Graph, and the Microsoft 365 audit log.

Sponsors

• Intelligink – We focus on the Microsoft Cloud so you can focus on your business

Show Notes

• Kusto query overview
• How Azure AD Kerberos Works
• sliding_window_counts plugin
• join operator
• Quickstart: Run your first Resource Graph query using Azure Resource Graph Explorer
• Starter Resource Graph query samples
• Advanced Resource Graph query samples
• Write your first query with Kusto Query Language
• Search the audit log in the compliance center
• tobiasmcvey/kusto-queries

About the sponsors

Intelligink utilizes their skill and passion for the Microsoft cloud to empower their customers with the freedom to focus on their core business. They partner with them to implement and administer their cloud technology deployments and solutions. Visit Intelligink.com for more info.