2026-04-13 19-13-06

11:07 3 发言者 3 章次章次 230 分部分会议

发言者

0:05

章章章章章章次章第一章章第一章 1: In this video, we're going to take a look at some examples of common queries you can do in ELK using the KQL search language. 70s · Speaker 1

In this video, we're going to take a look at some examples of common queries you can do in ELK using the KQL search language. Now, a lot of these are going to be similar to what we did if you watched the video on the common Splunk queries. …
1:16

章章章章章章次章第一章章第一章 2: So in this one, we're just going to take a look at some of the common queries. 301s · Speaker 3

So in this one, we're just going to take a look at some of the common queries. So we're going to take a look at searching for suspicious account logins, different process launches, specifically suspicious one, that was hard to say, any sort…
6:17

章章章章章章次章第一章章第一章 3: You see it auto -completed, the quotation marks. 277s · Speaker 1

You see it auto -completed, the quotation marks. And we're going to search for encoded. And the wildcard here. Search, no results, but again, perfectly fine to not find results in a threat hunt. If you're sure that your query is correct and…