We use cookies to make your experience better. By continuing to browse our site you are agreeing to our use of cookies. Learn more.
The Definitive Guide to KQL by Mark Morowczynski
Turn the avalanche of raw data from Azure Data Explorer, Azure Monitor, Microsoft Sentinel, and other Microsoft data platforms into actionable intelligence with KQL (Kusto Query Language). Experts in information security and analysis guide you through what it takes to automate your approach to risk assessment and remediation, speeding up detection time while reducing manual work using KQL. This accessible and practical guide-designed for a broad range of people with varying experience in KQL-will quickly make KQL second nature for information security.
Solve real problems with Kusto Query Language- and build your competitive advantage:
Learn the fundamentals of KQL-what it is and where it is used Examine the anatomy of a KQL query Understand why data summation and aggregation is important See examples of data summation, including count, countif, and dcount Learn the benefits of moving from raw data ingestion to a more automated approach for security operations Unlock how to write efficient and effective queries Work with advanced KQL operators, advanced data strings, and multivalued strings Explore KQL for day-to-day admin tasks, performance, and troubleshooting Use KQL across Azure, including app services and function apps Delve into defending and threat hunting using KQL Recognize indicators of compromise and anomaly detection Learn to access and contribute to hunting queries via GitHub and workbooks via Microsoft Entra IDAbout the Author: Mark Morowczynski is a principal product manager on the Security Customer Experience Engineering (CxE) team at Microsoft. He spends most of his time working with customers on their deployments in the Identity and Access Management (IAM) and information security space. He's spoken at various industry events, including Black Hat, Defcon Blue Team Village, Blue Team Con, Microsoft Ignite, and several BSides and SANS Security Summits. He has a BS in computer science, an MS in computer information and network security, and an MBA from DePaul University. He also has a MS in Information Security Engineering from the SANS Technology Institute. He can be found online on Mastodon at @markmorow@infosec.exchange or his website at https://markmorow.com. Rod Trent is a senior program manager at Microsoft, focused on cybersecurity and AI. He has spoken at many conferences over the past 30-some years and has written several books, including Must Learn KQL: Essential Learning for the Cloud-focused Data Scientist, and thousands of articles. He is a husband, dad, and first-time grandfather. In his spare time (if such a thing does truly exist), you can regularly find him simultaneously watching Six Million Dollar Man episodes and writing KQL queries. Rod can be found on LinkedIn and X (formerly Twitter) at @rodtrent. Matthew Zorich was born and raised in Australia and works for the Microsoft GHOST team, which provides threat-hunting oversight to many areas of Microsoft. Before that, he worked for the Microsoft Detection and Response Team (DART) and dealt with some of the most complex and largest-scale cybersecurity compromises on the planet. Before joining Microsoft as a full-time employee, he was a Microsoft MVP, ran a blog focused on Microsoft Sentinel, and contributed hundreds of open-source KQL queries to the community. He is a die-hard sports fan, especially the NBA and cricket.
Number of pages | 480 |
---|
We will despatch your order as quickly as we can. If, for whatever reason, a product is out of stock we will contact you to discuss the likely delivery time or an alternative product.
First Item | 2 Items & Over | |
---|---|---|
UK | £3.75 | £5.00 |
EU | £15.00 | £30.00 |
USA & Canada | £30.00 | £50.00 |
Rest of the World | £45.00 | £60.00 |
Collect in Store | free | free |
Additional Delivery Information (and some really important bits):
UK Delivery
Orders for delivery in the UK are normally despatched by Royal Mail, using the RM 48 Tracked Service with most orders delivered to you within a few days of placing your order with us. For larger parcels, Courier and Signed For delivery services may be used. Signed Books are shipped in our specially made book mailing cartons, with the books themselves wrapped in paper to protect them. Sometimes we may ship your order in several parts, particularly if you have 'Pre-Order' titles in your order or titles which are held in stock with our publishing partners.
The Really Important Bit: Because we use tracked, courier and signed for delivery services, please use an address at which your parcel can be received during the normal working day, for example, you may want to have your order delivered to your work address if you're not at home during the day.
First Item @ £3.75 (sometimes a shipping supplement may be added for particularly heavy books or specific postcodes*)
2 Items & over @ £5.00 in total
Another Really Important Bit: There are a number of Postcodes in the UK for which we will need to charge a shipping supplement, this will be calculated once we know the size and weight of the shipment. For these orders we will contact customers to agree a suitable and economic method of shipping. There may also be additional time required for delivery to some areas of the United Kingdom. Where possible, we will ship book orders (under 2kg) by Royal Mail to all UK postcodes. Large multiple book orders and books over 2kg are often shipped via APC Overnight or similar, regardless of Postcode.
Overseas Delivery
Shipments to EU countries:
First Item @ £15.00 (sometimes a shipping supplement will be added for particularly heavy books)
2 Items & over @ £30.00 in total
A really, really important Brexit bit: From 1st January 2021 shipments to EU addresses may incur additional costs which could be requested by Fed Ex at the time of delivery. These costs may vary from country to country and are not within our control and will be in addition to the costs paid to us for your delivery. If in any doubt, please check with your local Fed Ex office what, if any, additional costs will be applicable to your order - https://www.fedex.com
From 1st July 2021, VAT will be applicable to those EU countries where VAT is applied to books - this additional charge will be collected by Fed Ex (or the Royal Mail) at the time of delivery.
Shipments to the USA & Canada:
First Item @ £30.00
2 Items & over @ £50.00 in total
A really, really important USA Tarriff bit: From 29th August 2025 shipments to the USA are likely to incur additional duties, taxes and/or tarriffs which will be requested by the courier at the time of delivery. These costs may vary from state to state and are not within our control. These local duties, taxes and/or tarriffs will be in addition to the costs paid to us for your delivery. If you are in any doubt, please check with your local Tax Official or Fed Ex office what, if any, additional costs will be applicable to your order. The primary HTS (Harmonized Tariff Schedule) Code for a hardback book is 4901.99.0070 - https://www.fedex.com
Shipments to the Rest of the World:
First Item @ £45.00
2 Items & over @ £60.00 in total
All overseas orders are shipped using a 'signed for' courier service - please provide an address at which your parcel can be signed for on receipt. We use the same packaging materials for our overseas deliveries as we do those in the UK. In some cases, particularly large and heavy books, or books being shipped to remote areas, may incur an additional shipping charge - if this is the case with your order, we'll notify you as quickly as possible of these charges and to arrange the additional payment. You can of course cancel your order with an immediate refund should you not wish to accept these additional costs. Shipments to overseas territories may incur additional Duty & Tax costs which could be requested by Fed Ex at the time of delivery. These costs may vary from country to country and are not within our control and will be in addition to the costs paid to us for your delivery. If in any doubt, please check with your local Fed Ex office what, if any, additional Tax & Duty costs will be applicable to your order - https://www.fedex.com
Collect in Person at Coles Books
We're open Monday - Saturday, 9:00am - 5:30pm. If you're collecting your order, please wait until you get the text, phone call or email from us, just to be on the safe side and to ensure we have your order ready for you on arrival (we'll use the contact information provided during checkout). Not everything on our website is available for immediate collection, please do wait for the text, call or email - if time is of the essence, we'd suggest you call us on 01869 320779 and check availability prior to placing your order. You can pick up your order from the till, please bring a copy of your email receipt (electronic or printed is fine).
Coming by Car
If you're coming to Coles by car, why not take advantage of the 2 hours free parking at Sainsbury's Pioneer Square - just follow the signs for Pioneer Square as you drive into Bicester and park in the multi-storey car park above the supermarket. Come down the travelators, exit Sainsbury's, turn right and follow the pedestrianised walkway to Crown Walk and turn right - and Coles will be right in front of you. You don't need to shop in Sainsbury's to get the free parking!
Where to Find Us
Coles Books
22 Crown Walk
Pioneer Square
Bicester, Oxfordshire
OX26 6HY, United Kingdom
It was the most impressive packaging that I have EVER SEEN!!! The books were in perfect condition!!!!!
Super fast delivery and well packaged. Quality item and service!