We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent ce3dac3 commit 0beee10Copy full SHA for 0beee10
1 file changed
plugins/MicrosoftDefender/v1/dataStreams/listDevices.json
@@ -13,7 +13,7 @@
13
"expandInnerObjects": true,
14
"endpointPath": "runHuntingQuery",
15
"postBody": {
16
- "Query": "DeviceInfo | summarize arg_max(Timestamp, *) by DeviceId"
+ "Query": "DeviceInfo | summarize arg_max(Timestamp, *) by DeviceId | where DeviceName != \"\""
17
},
18
"pathToData": "results",
19
"getArgs": [],
0 commit comments