Skip to content

Instantly share code, notes, and snippets.

@0xffhh
0xffhh / Kusto Language Bridge
Created September 29, 2020 12:15
The kusto language definition file as used by defender atp
This file has been truncated, but you can view the full file.
//Source: https://securitycenter.windows.com/assets/monaco/vs/language/kusto/Kusto.Language.Bridge.min.js
Bridge.assembly("Kusto.Language.Bridge", function() {
"use strict";
Bridge.define("Kusto.Language.Aggregates", {
statics: {
fields: {
Sum: null,
SumIf: null,
Cnt: null,
Count: null,
sub IsSafe {
#http://sleep.dashnine.org/manual/index.html
local('$pos');
@badchars = @(";", "&", '$', "'");
foreach $index => $value (@badchars)
{
$pos = indexOf($1, $value);
if (-isnumber $pos)
{
println("Invalid char detected");