rod-trent / mustlearnkql Goto Github PK

Would be good to have automatic way of generating book, based on a commit hook/github action in order to have this process automatized.

Is it possible to share actions of generation of book?

Maybe you could don't mention the available semi- and anti-joins.

Let me know and I’ll get it updated toot sweet.

I'm not sure what it should say after "updated" but pretty sure you didn't mean "toot sweet" :)

Thank you so much for this site, and all your repos :) I've looked all over for a good KQL resource and you're one of the top ones.

Any thought of moving to Markdown for your book? That would allow easy web integration or PDF output?

Thanks,
J

https://i0.wp.com/azurecloudai.blog/wp-content/uploads/2022/02/pinttodashboard.png?ssl=1

Pin do Azure Dashboard

Should be...

Pin to Azure Dashboard

Module 4 has some duplicate text "...following 10 tables: "

Loving the book and it feels churlish to flag this, but I guess you're rather know! In chapter 13, there's a sentence "Extend is use quite a bit in Analytics Rules, so understanding it’s power and capability is important.". I assume this should be "Extend is useD..."

In module 7 it states "that can get miry fast", not sure what this means :) Please clarify

So, now that we’ve found something interesting, we want to use the structure of the Search Query to pare down the results to minimize the effort and workload to identify that that something interesting is actually something notable and worth investigating.

Should be...(omit extra "that")

So, now that we’ve found something interesting, we want to use the structure of the Search Query to pare down the results to minimize the effort and workload to identify that that something interesting is actually something notable and worth investigating.

None of the links deliver the page it's linked to. https://raw.githubusercontent.com/rod-trent/MustLearnKQL/main/Book_Version/MustLearnKQL_Book.pdf. I also tried downloading the book, this doesn't make a difference either.
These all deliver similar DNS errors for me:
https://cda.ms/3fH
https://cda.ms/3fm

Is:

Remember, story problems and developing storylines are the basis for all security. That doesn’t just mean things like who did it and why, but also includes how to expose the data to show the story. That’s important.
OK…here’s who I would supply the result from the ask:

The bolded who should be how instead

Apologies if this is the not the right place to post this. There doesn't appear to be any data in the playground.

https://aka.ms/LADemo