In Episode 260, Ben and Scott talk about how to get started with KQL, or Kusto Query Language across a number of Azure and Microsoft 365 services, including Azure Monitor, Azure Data Explorer, the Azure Resources Graph, and the Microsoft 365 audit log.
Sponsors
Intelligink - We focus on the Microsoft Cloud so you can focus on your business
Show Notes
Kusto query overview
How Azure AD Kerberos Works
sliding_window_counts plugin
join operator
Quickstart: Run your first Resource Graph query using Azure Resource Graph Explorer
Starter Resource Graph query samples
Advanced Resource Graph query samples
Write your first query with Kusto Query Language
Search the audit log in the compliance center
tobiasmcvey/kusto-queries
About the sponsors
Intelligink utilizes their skill and passion for the Microsoft cloud to empower their customers with the freedom to focus on their core business. They partner with them to implement and administer their cloud technology deployments and solutions. Visit Intelligink.com for more info.
