nielsb · @nielsb
83 followers · 134 posts · Server fosstodon.org

New post: "Interesting Stuff - Week 23, 2023".

This week:

* New Kusto build with exciting features.
* Kusto Detective Agency Season 2 has started.
* Introduction to Microsoft Fabric.
* GPT-4 + Streaming Data = Real-Time Generative AI.
* Call for Speakers for Data Saturday Durban.

Read all about it:

nielsberglund.com/post/2023-06

@azuredataexplorer


#ai #ml #kafka #openai #microsoftfabric #KQL #datasaturdaydurban

Last updated 1 year ago

nielsb · @nielsb
78 followers · 123 posts · Server fosstodon.org

New post: "Develop a Real-Time Leaderboard Using Kafka and Azure Data Explorer - II"

This is the third post about using Kafka and @azuredataexplorer (ADX) to develop a real-time leaderboard for online gaming.

In this post, you will see more about ingesting data into ADX and some "cool stuff" related to that. Specifically, what to do if you need to update/transform the data you ingest.

nielsberglund.com/post/2023-04

#kafka #azuredataexplorer #KQL #kusto

Last updated 1 year ago

nielsb · @nielsb
76 followers · 119 posts · Server fosstodon.org

New post: "Interesting Stuff - Week 11, 2023".

This week:

* Learn all about @azuredataexplorer and , thanks to Akshay Dixit.
* I finally finished the second post in the Leaderboard, Kafka, and ADX series
* ChatGPT and dialogue prompting. Very interesting
* An old colleague of mine -Ted Neward - ponders the impact of AI on developers.
* Where has all the Big Data gone?

Read all about it:

nielsberglund.com/post/2023-03

#kusto #azuredataexplorer #KQL #kafka #KafkaConnect #ai #ml #openai

Last updated 1 year ago

Claudia Regio · @mammaclauds
213 followers · 79 posts · Server fosstodon.org

Did you miss our Polyglot Notebooks livestream this morning with @cecilphillip ?? Not a problem - catch up on the recording here to learn how notebooks are a great tool for exploring SDKs!

youtube.com/watch?v=cY9wHDhJA6

#vscode #jupyter #csharp #fsharp #powershell #javascript #html #sql #KQL #mermaid #stripe #dotnet

Last updated 1 year ago

rodtrent :verified: · @rodtrent
496 followers · 1054 posts · Server infosec.exchange

Counts the number of subscription creation events per hour rodtrent.com/9kk

#mustlearnkql #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
496 followers · 1042 posts · Server infosec.exchange

KQL : Azure AD Identity Protection & Detection rodtrent.com/y4j

#mustlearnkql #KQL #azuread #azureidentity

Last updated 1 year ago

nielsb · @nielsb
75 followers · 118 posts · Server fosstodon.org

Data Analysis in @azuredataexplorer using

In this learning path, you will learn through 6 training modules, how to analyze data in () using the Query Language ().

learn.microsoft.com/en-us/trai

(Reshared from another site ๐Ÿ˜€)

#KQL #azuredataexplorer #adx #kusto

Last updated 1 year ago

Claudia Regio · @mammaclauds
209 followers · 78 posts · Server fosstodon.org

Want to use multiple languages in a notebook while getting rich IntelliSense? Check out the
Polyglot Notebooks extension, now in GA!๐ŸŽ‰

has language server support and variable sharing for C#, JavaScript, SQL, & more!
๐Ÿ‘‰ aka.ms/PolyglotNotebooksGA

#vscode #polyglotnotebooks #csharp #fsharp #javascript #powershell #html #sql #mermaid #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
494 followers · 1019 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
490 followers · 998 posts · Server infosec.exchange

PlaybookActivity.kql - Watch Playbook execution and display Playbook name, which action was invoked, and who did it rodtrent.com/ija

#MicrosoftSentinel #cybersecurity #microsoftsecurity #security #KQL #mustlearnkql

Last updated 1 year ago

rodtrent :verified: · @rodtrent
491 followers · 994 posts · Server infosec.exchange

ChatGPT/OpenAI is the new shiny thing. To monitor security for the new shiny you'll need KQL skills.

Not started learning KQL yet? Start this weekend with this in-depth, hands-on learning tool! aka.ms/MustLearnKQL

#mustlearnkql #KQL #openai #ai

Last updated 1 year ago

Axi0kers0s ๐Ÿ‘พ · @axi0kers0s
88 followers · 545 posts · Server infosec.exchange

Finally, the workbook in Sentinel to monitor FIN7, FIN11, and FIN12 initial access techniques is coming together, that's after countless of pointless KQL queries.

#threathunting #KQL #sentinel

Last updated 1 year ago

Sentry23 · @Sentry23
166 followers · 314 posts · Server infosec.exchange

if anybody is interested.

hunting query for recent variant.

(still tuning some parameters as it can be a bit slow, and file size filter can probably be a lot bigger)

EmailAttachmentInfo
| where FileType == "zip" and FileName endswith_cs "zip" and FileSize > 100000
| join kind=inner (EmailEvents | where EmailDirection == "Inbound" and SenderFromAddress !endswith "[mydomain.com]" and (Subject startswith_cs "Re:" or Subject startswith_cs "Fwd:")) on NetworkMessageId, SenderFromAddress, RecipientEmailAddress
| join DeviceFileEvents on SHA256
| distinct SenderFromAddress, RecipientEmailAddress, FileName, Subject, SHA1
| invoke FileProfile()
| where GlobalPrevalence < 15

#MDE #KQL #emotet

Last updated 1 year ago

matsest · @matsest
13 followers · 4 posts · Server hachyderm.io

TIL: How to search for two consecutive log entries in using to make an alert in using the prev() operator.

In this case the error message is generic, and I need the context of the previous message to create a specific alert.

#loganalytics #KQL #azuremonitor #mustlearnkql

Last updated 1 year ago

rodtrent :verified: · @rodtrent
487 followers · 978 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
487 followers · 974 posts · Server infosec.exchange
rodtrent :verified: · @rodtrent
486 followers · 968 posts · Server infosec.exchange
blueninja :verified: · @blueninja
72 followers · 33 posts · Server infosec.exchange

Get entire Azure Data Explorer cluster for free
aka.ms/kustofree
It includes 100GB storage. You can ingest any data.

#infosec #blueteam #KQL

Last updated 1 year ago

rodtrent :verified: · @rodtrent
480 followers · 928 posts · Server infosec.exchange

Take your Must Learn KQL skills to the next level with the Cloud Skills Challenge - Learn Kusto Query Language (KQL) rodtrent.com/8gl

#mustlearnkql #KQL #microsoftlearning

Last updated 1 year ago

rodtrent :verified: · @rodtrent
478 followers · 913 posts · Server infosec.exchange

Detecting AD CS subjectAltName (SAN) Abuse Using KQL rodtrent.com/poj

#mustlearnkql #KQL

Last updated 1 year ago