https://www.modernsecurity.nl/must-learn-kql/