My Games
Account 🔐
Sign Up
Login
Global Leaderboard
Case Vault
Badge Backpack
Blue Team Glossary
Login and start playing
Leaving so soon?
×
You really want to log out? We were having so much fun!
Home
›
Glossary
›
take
Take
Definition
In KQL, the take operator is a useful tool that provides you with a random number of rows from the incoming dataset. This is **very** helpful when you're trying to determine what types of information a given table is holding. **Examples:** What domain is used by employees' email accounts? ```sql Employees | take 10 ``` What types of information can be found in a process command line? ```sql ProcessEvents | take 25 ``` What does a sha256 hash even look like? ```sql FileCreationEvent | take 5 ```
Explore More Terms
Actor
Powershell
Url
Contains
Reconnaissance
.png)
