KQL (Kusto): Introduction

Walkthrough summary

KQL (Kusto): Introduction TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• In addition to being a SIEM solution, what else is Microsoft Sentinel? (use the abbreviation)
  Open the walkthrough page to inspect the full answer and command flow.
• How does MS Sentinel support other security solutions that are not included in the built-in connectors?
  Open the walkthrough page to inspect the full answer and command flow.
• What initial service was KQL created for?
  Open the walkthrough page to inspect the full answer and command flow.
• Analyze the example query from the task. How many computers will the query return?
  Open the walkthrough page to inspect the full answer and command flow.
• What table is the example query retrieving its data from?
  Open the walkthrough page to inspect the full answer and command flow.