Welcome to Valdoria !

1. What is the Newspaper Printer's Name?

Ans: Clark Kent

Next, you talk with Clark Kent. He seems very distressed about the whole situation. 😓 He tells you he simply printed the article that was emailed to him, as he always does.

now let's write KQL where role == "Editorial Intern"

// Some code

Employees 
| where role == "Editorial Intern" 

result will be

Ans :

Ronnie McLovin

1. When was the Editorial Intern hired at The Valdorian Times?

   looking at the above KQL result there is column name hire_date.

Ans :

2024-01-02T08:00:00Z

1. Q How many total emails has Clark Kent received?

Ans :

// KQL

Email 
| where recipient == "[email protected]"
| count

1. What was the subject line of this email ?

Ans : Let's modify previous Kql with date and timestamp

// KQL

Email 
| where recipient == "[email protected]"
| where timestamp between  (datetime(2024-01-31T00:00:00Z) .. datetime(2024-02-01T00:00:00Z))

URGENT: Final OpEd Draft Edits (Please publish the following article in tomorrow's paper))

1. Enter the sender's email address.

Ans : In previous KQL there is sender column that's answer

1. What was the name of the .docx file that was sent in this email?

Ans :- expand the carat located on the left side of the result

1. Do you think this needs further investigation (yes/no)? Choose wisely 😉

Ans :- yes