Initial commit: KQL ↔ SDL PowerQuery proof of equivalence

2026-06-10 05:57:15 +00:00 · 2026-06-01 09:57:14 +02:00
commit 23cbaa9c08
91 changed files with 5966 additions and 0 deletions
@@ -0,0 +1,7 @@
+CommonSecurityLog
+| where TimeGenerated > ago(1d)
+| summarize Count = count(),
+            DistinctDestinationIps = dcount(DestinationIP),
+            NoofBytesTransferred = sum(SentBytes),
+            NoofBytesReceived = sum(ReceivedBytes)
+    by SourceIP, DeviceVendor