|
2043 | 2043 | { |
2044 | 2044 | "metricName": "Total data received", |
2045 | 2045 | "legend": "Alerts", |
2046 | | - "baseQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\")" |
| 2046 | + "baseQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\",\"Microsoft Defender XDR\")" |
2047 | 2047 | }, |
2048 | 2048 | { |
2049 | 2049 | "metricName": "Total data received", |
|
2143 | 2143 | }, |
2144 | 2144 | { |
2145 | 2145 | "name": "SecurityAlert", |
2146 | | - "lastDataReceivedQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\")\n | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)" |
| 2146 | + "lastDataReceivedQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\",\"Microsoft Defender XDR\")\n | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)" |
2147 | 2147 | }, |
2148 | 2148 | { |
2149 | 2149 | "name": "DeviceEvents", |
|
2320 | 2320 | { |
2321 | 2321 | "metricName": "Total data received", |
2322 | 2322 | "legend": "Alerts", |
2323 | | - "baseQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\")" |
| 2323 | + "baseQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\",\"Microsoft Defender XDR\")" |
2324 | 2324 | }, |
2325 | 2325 | { |
2326 | 2326 | "metricName": "Total data received", |
|
2355 | 2355 | }, |
2356 | 2356 | { |
2357 | 2357 | "name": "SecurityAlert", |
2358 | | - "lastDataReceivedQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\")\n | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)" |
| 2358 | + "lastDataReceivedQuery": "SecurityAlert \n| where ProductName in(\"Microsoft Defender Advanced Threat Protection\",\"Office 365 Advanced Threat Protection\",\"Azure Advanced Threat Protection\",\"Microsoft Cloud App Security\",\"Microsoft 365 Defender\",\"Microsoft Defender XDR\")\n | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)" |
2359 | 2359 | }, |
2360 | 2360 | { |
2361 | 2361 | "name": "DeviceEvents", |
|
0 commit comments