Windows Defender ATP - Advanced Hunting Queries

You can find the Azure Log Analytics Query Language Reference here:

https://docs.loganalytics.io/docs/Language-Reference

You can find the database schema, which isn't included in the Azure Log Analytics Query Language Reference, here:

https://github.com/InfoSecC/WDATP-Advanced-Hunting/blob/master/schema