Where it might be expected that the longer the query the more results you will get, it is mainly the other way around. A bigger query often results in more fine grained detections.

Defining Your Goal

A query is not about the size of the code, it is about the results you want to get. 2 lines of KQL can reach the goal you want to acchieve, but for other queries that might not be enough.

Stacking Tables

Enriching queries with input from multiple tables can help

Join

Stacking