Curriculum
Course Content
4 items · 1 sections
- 01 KQL syntax, filtering and summarising
- 02 Joining tables
- 03 Building a hunting query
- 04 Reading and adapting queries
SC-200
Intermediate
Certificate
KQL Fundamentals
The query language of the Microsoft security stack. KQL syntax, filtering and summarising, joining tables, and building the queries that hunt through Sentinel and Defender data.
Skills
What You Will Learn in This Course
Write KQL to filter and summarise events.
Join tables to correlate data.
Build a hunting query from a question.
Read and adapt an existing query.
About This Course
The query language of the Microsoft security stack. KQL syntax, filtering and summarising, joining tables, and building the queries that hunt through Sentinel and Defender data.
Requirements
- Microsoft Sentinel.
Who It Is For
- SC-200-track analysts.
Certified
Certificates You Can Earn
Finish your course and receive an accredited MotiGraph certificate you can add to your CV and share with employers.
