SQL Date Filtering Lab

Activity Overview

As a security analyst, you’ll often need to query numbers and dates.

For example, you may need to filter patch dates to find machines that need an update. Or you might filter login attempts made during a certain time to investigate a security incident.

Common operators for working with numeric or date and time data will help you accurately filter data. These are some of the operators you'll use:

• = (equal)
• > (greater than)
• < (less than)
• <> (not equal to)
• >= (greater than or equal to)
• <= (less than or equal to)

In this lab activity, I applied these operators to accurately filter for specific numbers and dates!

Scenario

In this scenario, I investigated a recent security incident.

I needed to gather information about login attempts for certain dates and times to help resolve the incident.

Here's how I approached the task:

• First, I retrieved login events made after a certain date.
• Second, I narrowed the focus of the search to filter logins in a date range.
• Third, I investigated logins that were made at certain times.
• Finally, I filtered login attempts based on their event IDs.

Conclusion

I now have practical experience in using SQL to:

• Apply the WHERE keyword,
• Use the BETWEEN and AND operators, and
• Work with numeric or date and time data types using operators like =, >, >=.

I'm now ready to filter for numbers and dates to extract all sorts of useful data!