Build multi-table statements using KQL

Intermediate
Security Operations Analyst
Microsoft Defender XDR
Microsoft Sentinel
Azure Log Analytics

Learn how to work with multiple tables using KQL.

Learning objectives

Upon completion of this module, the learner will be able to:

  • Create queries using unions to view results across multiple tables using KQL
  • Merge two tables with the join operator using KQL