Best practices of QQL syntax.. See - Community Article
Whats the difference between Detection based tokens vs KB based tokens?
How analyze your question to build a QQL?
When to do nesting?
How to do nesting properly?
How to use ranges?
How to do includes / Excludes?
How and when to do ranges vs Greater / Less than?