New post: "Interesting Stuff - Week 23, 2023".
This week:
* New Kusto build with exciting features.
* Kusto Detective Agency Season 2 has started.
* Introduction to Microsoft Fabric.
* GPT-4 + Streaming Data = Real-Time Generative AI.
* Call for Speakers for Data Saturday Durban.
Read all about it:
https://nielsberglund.com/post/2023-06-10-interesting-stuff---week-23-2023/
#AI #ML #kafka #openai #microsoftfabric #kql
#datasaturdaydurban
#ai #ml #kafka #openai #microsoftfabric #KQL #datasaturdaydurban
New post: "Develop a Real-Time Leaderboard Using Kafka and Azure Data Explorer - II"
This is the third post about using Kafka and @azuredataexplorer (ADX) to develop a real-time leaderboard for online gaming.
In this post, you will see more about ingesting data into ADX and some "cool stuff" related to that. Specifically, what to do if you need to update/transform the data you ingest.
#kafka #azuredataexplorer #KQL #kusto
New post: "Interesting Stuff - Week 11, 2023".
This week:
* Learn all about @azuredataexplorer and #Kusto, thanks to Akshay Dixit.
* I finally finished the second post in the Leaderboard, Kafka, and ADX series
* ChatGPT and dialogue prompting. Very interesting
* An old colleague of mine -Ted Neward - ponders the impact of AI on developers.
* Where has all the Big Data gone?
Read all about it:
https://nielsberglund.com/post/2023-03-19-interesting-stuff---week-11-2023/
#AzureDataExplorer #KQL #kafka #kafkaconnect #AI #ml #openai
#kusto #azuredataexplorer #KQL #kafka #KafkaConnect #ai #ml #openai
Did you miss our #vscode Polyglot Notebooks livestream this morning with @cecilphillip ?? Not a problem - catch up on the recording here to learn how notebooks are a great tool for exploring SDKs!
https://www.youtube.com/watch?v=cY9wHDhJA6Y
#jupyter #csharp #fsharp #powershell #javascript #html #sql #kql #mermaid #stripe #dotnet
#vscode #jupyter #csharp #fsharp #powershell #javascript #html #sql #KQL #mermaid #stripe #dotnet
Counts the number of subscription creation events per hour https://rodtrent.com/9kk
KQL : Azure AD Identity Protection & Detection https://rodtrent.com/y4j
#mustlearnkql #KQL #azuread #azureidentity
Data Analysis in @azuredataexplorer using #KQL
In this learning path, you will learn through 6 training modules, how to analyze data in #AzureDataExplorer (#ADX) using the #Kusto Query Language (#KQL).
https://learn.microsoft.com/en-us/training/paths/data-analysis-data-explorer-kusto-query-language/
(Reshared from another site ๐)
#KQL #azuredataexplorer #adx #kusto
Want to use multiple languages in a notebook while getting rich IntelliSense? Check out the
#vscode Polyglot Notebooks extension, now in GA!๐
#polyglotnotebooks has language server support and variable sharing for C#, JavaScript, SQL, & more!
๐ https://aka.ms/PolyglotNotebooksGA
#csharp #fsharp #javascript #powershell #javascript #html #sql #mermaid #kql
#vscode #polyglotnotebooks #csharp #fsharp #javascript #powershell #html #sql #mermaid #KQL
Monitor Azure Open AI service failures https://rodtrent.com/djh
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL
#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql
PlaybookActivity.kql - Watch Playbook execution and display Playbook name, which action was invoked, and who did it https://rodtrent.com/ija
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL
#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql
ChatGPT/OpenAI is the new shiny thing. To monitor security for the new shiny you'll need KQL skills.
Not started learning KQL yet? Start this weekend with this in-depth, hands-on learning tool! https://aka.ms/MustLearnKQL
#mustlearnkql #KQL #openai #ai
Finally, the workbook in Sentinel to monitor FIN7, FIN11, and FIN12 initial access techniques is coming together, that's after countless of pointless KQL queries.
if anybody is interested.
#MDE #KQL hunting query for recent #Emotet variant.
(still tuning some parameters as it can be a bit slow, and file size filter can probably be a lot bigger)
EmailAttachmentInfo
| where FileType == "zip" and FileName endswith_cs "zip" and FileSize > 100000
| join kind=inner (EmailEvents | where EmailDirection == "Inbound" and SenderFromAddress !endswith "[mydomain.com]" and (Subject startswith_cs "Re:" or Subject startswith_cs "Fwd:")) on NetworkMessageId, SenderFromAddress, RecipientEmailAddress
| join DeviceFileEvents on SHA256
| distinct SenderFromAddress, RecipientEmailAddress, FileName, Subject, SHA1
| invoke FileProfile()
| where GlobalPrevalence < 15
TIL: How to search for two consecutive log entries in #loganalytics using #kql to make an alert in #AzureMonitor using the prev() operator.
In this case the error message is generic, and I need the context of the previous message to create a specific alert. #MustLearnKQL
#loganalytics #KQL #azuremonitor #mustlearnkql
Find when someone uses the ChatGPT Logic App API https://rodtrent.com/pmt
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL #OpenAI #AI
#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql #openai #ai
Show who created a new Open AI Deployment https://rodtrent.com/ym7
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL #OpenAI #AI #Azure
#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql #openai #ai #azure
Tracking Azure Open AI administrative requests https://rodtrent.com/nwl
#MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #KQL #MustLearnKQL #OpenAI #Azure
#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql #openai #azure
Take your Must Learn KQL skills to the next level with the Cloud Skills Challenge - Learn Kusto Query Language (KQL) https://rodtrent.com/8gl
#mustlearnkql #KQL #microsoftlearning
Detecting AD CS subjectAltName (SAN) Abuse Using KQL https://rodtrent.com/poj