Kusto Detective Agency

6 posts
KDA: Echoes of Deception - Case 4

KDA: Echoes of Deception - Case 4

Someone hacked Digitown's municipality and stole classified documents. 45 million rows of router traffic, an IP lookup table, and KQL's anomaly detection to find who did it.

How to 4 min read KQL
KDA: Echoes of Deception - Case 3

KDA: Echoes of Deception - Case 3

20 stolen cars with swapped license plates - using KQL to trace VIN changes through traffic data and find the common storage location.

How to 3 min read KQL
KDA: Echoes of Deception - Case 2

KDA: Echoes of Deception - Case 2

Digitown's citizens are being targeted by phishing calls. Using KQL, I analyze call patterns - duration, hidden caller IDs, and disconnect behavior - to unmask the phisher.

How to 3 min read KQL
KDA: Echoes of Deception - Case 1

KDA: Echoes of Deception - Case 1

Digitown's utility bills doubled overnight. Using KQL and the EXPLAIN feature, I dig through billing data to find duplicate charges and negative consumption.

How to 3 min read KQL
KDA: Echoes of Deception - Onboarding

KDA: Echoes of Deception - Onboarding

A walkthrough of the Kusto Detective Agency UI and the onboarding challenge - finding which detective earned the most bounty money in 2022.

How to 3 min read KQL
Kusto Detective Agency - Intro

Kusto Detective Agency - Intro

I have a soft spot for Kusto. This series walks through the Kusto Detective Agency challenges - data mysteries you solve with KQL instead of a magnifying glass.

How to 2 min read KQL