KQL Detective #1: Kusto Detective Agency Onboarding Walkthrough скачать в хорошем качестве

KQL Detective #1: Kusto Detective Agency Onboarding Walkthrough

In this episode, I solve the Kusto Detective Agency onboarding case from scratch using real investigative KQL techniques. This video kicks off my KQL Detective series, where I work through the Kusto Detective Agency challenges exactly the way I would approach a real investigation. This is not a polished tutorial. This is a live case walkthrough — exploring the data, forming hypotheses, hitting mistakes, and correcting them as new constraints appear. In this episode: We set up the Kusto Detective Agency onboarding dataset Explore event types and dynamic Properties Identify where bounty data actually lives Join case lifecycle events correctly Fix a logic error after discovering only the first solver gets paid Use arg_min() to identify the winning detective Calculate total bounty earnings accurately Challenge source: https://detective.kusto.io/ Series: KQL Detective Episode: Onboarding — Echoes of Deception If you’re learning KQL through hands-on problem solving rather than syntax drills, this series is for you. Chapters: 00:00 – The Onboarding Case 02:10 – Setting Up the Dataset 05:40 – Exploring Events and Properties 09:30 – Finding the Case Bounty 14:20 – First (Incorrect) Assumption 21:45 – Discovering the First-Solver Rule 28:50 – Identifying the Winning Detective 37:10 – Final Answer 42:30 – Lessons from the Case