Vast amounts of data are gathered daily in Azure tenants and not only. Sentinel, Azure Monitor, 365 Defender are just some of the repositories full of data.
How easy is it to detect a pattern or an anomaly that will drive us to an actionable finding?
How difficult is it to navigate through the vast amounts of data using KQL?
Every journey and exploration starts with the first step, the most important in a journey. So, in this session we will go through the basics and some more complex steps and paths towards our exploration of data.