├── .gitignore ├── Dockerfile ├── KQLAnalyzer.Tests ├── AnalyzeQueryTests.cs ├── KQLAnalyzer.Tests.csproj └── test_data │ ├── custom_table.json │ ├── fileprofile.json │ ├── scalar_function.json │ ├── sentinel_no_fileprofile.json │ ├── simple_query.json │ ├── simple_query_using_default_tables.json │ ├── tabular_function.json │ ├── tabular_function_required_args.json │ └── watchlist.json ├── KQLValidator.sln ├── README.md ├── additional_columns.json ├── docker-compose.yml ├── environments.json ├── get_schemas.py ├── src ├── EnvironmentDefinition.cs ├── EnvironmentUtils.cs ├── KQLAnalyzer.csproj ├── KQLAnalyzerRESTService.cs ├── KustoAnalyzer.cs ├── Models │ ├── AnalyzeRequest.cs │ ├── AnalyzeResults.cs │ ├── ArgumentDetails.cs │ ├── KQLEnvironments.cs │ ├── LocalData.cs │ ├── ScalarFunctionDetails.cs │ ├── TableDetails.cs │ ├── TabularFunctionDetails.cs │ └── WatchlistDetails.cs └── Program.cs └── update_schemas.sh /.gitignore: -------------------------------------------------------------------------------- 1 | bin 2 | obj 3 | -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/Dockerfile -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/AnalyzeQueryTests.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/AnalyzeQueryTests.cs -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/KQLAnalyzer.Tests.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/KQLAnalyzer.Tests.csproj -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/custom_table.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/custom_table.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/fileprofile.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/fileprofile.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/scalar_function.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/scalar_function.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/sentinel_no_fileprofile.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/sentinel_no_fileprofile.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/simple_query.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/simple_query.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/simple_query_using_default_tables.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/simple_query_using_default_tables.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/tabular_function.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/tabular_function.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/tabular_function_required_args.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/tabular_function_required_args.json -------------------------------------------------------------------------------- /KQLAnalyzer.Tests/test_data/watchlist.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLAnalyzer.Tests/test_data/watchlist.json -------------------------------------------------------------------------------- /KQLValidator.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/KQLValidator.sln -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/README.md -------------------------------------------------------------------------------- /additional_columns.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/additional_columns.json -------------------------------------------------------------------------------- /docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/docker-compose.yml -------------------------------------------------------------------------------- /environments.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/environments.json -------------------------------------------------------------------------------- /get_schemas.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/get_schemas.py -------------------------------------------------------------------------------- /src/EnvironmentDefinition.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/EnvironmentDefinition.cs -------------------------------------------------------------------------------- /src/EnvironmentUtils.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/EnvironmentUtils.cs -------------------------------------------------------------------------------- /src/KQLAnalyzer.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/KQLAnalyzer.csproj -------------------------------------------------------------------------------- /src/KQLAnalyzerRESTService.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/KQLAnalyzerRESTService.cs -------------------------------------------------------------------------------- /src/KustoAnalyzer.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/KustoAnalyzer.cs -------------------------------------------------------------------------------- /src/Models/AnalyzeRequest.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/AnalyzeRequest.cs -------------------------------------------------------------------------------- /src/Models/AnalyzeResults.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/AnalyzeResults.cs -------------------------------------------------------------------------------- /src/Models/ArgumentDetails.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/ArgumentDetails.cs -------------------------------------------------------------------------------- /src/Models/KQLEnvironments.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/KQLEnvironments.cs -------------------------------------------------------------------------------- /src/Models/LocalData.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/LocalData.cs -------------------------------------------------------------------------------- /src/Models/ScalarFunctionDetails.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/ScalarFunctionDetails.cs -------------------------------------------------------------------------------- /src/Models/TableDetails.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/TableDetails.cs -------------------------------------------------------------------------------- /src/Models/TabularFunctionDetails.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/TabularFunctionDetails.cs -------------------------------------------------------------------------------- /src/Models/WatchlistDetails.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Models/WatchlistDetails.cs -------------------------------------------------------------------------------- /src/Program.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/FalconForceTeam/KQLAnalyzer/HEAD/src/Program.cs -------------------------------------------------------------------------------- /update_schemas.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | python3 get_schemas.py > environments.json 4 | --------------------------------------------------------------------------------