KQL

10 posts
KDA: Echoes of Deception - Case 7

KDA: Echoes of Deception - Case 7

A fugitive cyber-criminal, a wingsuit, and 24 million flight records. Somewhere between Doha and Dublin, Krypto jumped between planes mid-air.

How to 6 min read KQL
KDA: Echoes of Deception - Case 6

KDA: Echoes of Deception - Case 6

A cryptic message, a book cipher hidden in art provenance records, and a trail of clues leading to the leader of a shadowy cyber organization.

How to 10 min read KQL
KDA: Echoes of Deception - Case 5

KDA: Echoes of Deception - Case 5

A deleted podcast episode, 17 million archive log entries, and KQL's time series analysis to find the backup that was never supposed to survive.

How to 6 min read KQL
KDA: Echoes of Deception - Case 4

KDA: Echoes of Deception - Case 4

Someone hacked Digitown's municipality and stole classified documents. 45 million rows of router traffic, an IP lookup table, and KQL's anomaly detection to find who did it.

How to 4 min read KQL
KDA: Echoes of Deception - Case 3

KDA: Echoes of Deception - Case 3

20 stolen cars with swapped license plates - using KQL to trace VIN changes through traffic data and find the common storage location.

How to 3 min read KQL
KDA: Echoes of Deception - Case 2

KDA: Echoes of Deception - Case 2

Digitown's citizens are being targeted by phishing calls. Using KQL, I analyze call patterns - duration, hidden caller IDs, and disconnect behavior - to unmask the phisher.

How to 3 min read KQL
KDA: Echoes of Deception - Case 1

KDA: Echoes of Deception - Case 1

Digitown's utility bills doubled overnight. Using KQL and the EXPLAIN feature, I dig through billing data to find duplicate charges and negative consumption.

How to 3 min read KQL
KDA: Echoes of Deception - Onboarding

KDA: Echoes of Deception - Onboarding

A walkthrough of the Kusto Detective Agency UI and the onboarding challenge - finding which detective earned the most bounty money in 2022.

How to 3 min read KQL
Kusto Detective Agency - Intro

Kusto Detective Agency - Intro

I have a soft spot for Kusto. This series walks through the Kusto Detective Agency challenges - data mysteries you solve with KQL instead of a magnifying glass.

How to 2 min read KQL
Advent of Code 2022

Advent of Code 2022

This December I'm solving Advent of Code in two languages at once - SQL and KQL. Here's where I'm posting the code and how far I think I'll get.

Non-technical 2 min read KQL · Personal