RE2 in Kusto: The Regular Expression Cheat Sheet

RE2 in Kusto If you work with Kusto (Azure Data Explorer), you’re inevitably going to find yourself needing regular expressions. As someone who writes Kusto queries daily in security operations, I’ve developed a love-hate relationship with RE2 regex in KQL. It’s so powerful, but can be difficult to get your head around. This is my personal cheat sheet that I refer to, and I hope it saves you some time too....

March 2, 2025

Kusto Query Hints and Strategies

Kusto Query Hints and Strategies When you’re working with a large volume of log data, query performance becomes more important. If you’ve ever stared at a loading screen while your Kusto query slowly runs in the background, this post is for you. Alternatively, if you grab a cup of tea while your query is running, you’re probably okay to not bother reading this. However, these are some performance hints I actually use (sometimes), not just theoretical optimisations....

January 27, 2025

Pi-hole Wireguard VPN in Azure

Pi-hole Wireguard VPN in Azure This guide outlines the steps for setting up a Pi-hole VPN with Wireguard on an Azure virtual machine (VM). We will cover creating the VM, configuring Wireguard, and installing Pi-hole. Step 1: Azure VM Setup Create a New Resource Group To create a new resource group, run: az group create --name rg-phwg-vpn --location uksouth Create a Virtual Machine Now, create your virtual machine with the following command:...

November 19, 2024

Building a Blog with Azure and Hugo

Building a blog with Hugo and Azure I recently set up this blog using Hugo and Azure Static Web Apps, and I wanted to share the process. This approach provides a fast, secure, and cost-effective (free!) way to run a technical blog. Here’s how I did it from scratch. Why This Stack? Hugo: Really fast static site generator with great Markdown support and documentation on how to integrate with Azure Statis Web Apps PaperMod theme: Clean design with dark mode and code highlighting etc Azure Static Web Apps: Free tier available, easy deployment, and global CDN Prerequisites Git Azure account Step 1: Install Hugo First, let’s get Hugo installed....

November 3, 2024