Merge pull request #65 from squaredup/work/jd/PLUG-4656

PLUG-4656: MicrosoftDefender - Fix Device Import not working

Author: jame2O

plugins/MicrosoftDefender/v1/dataStreams/listDevices.json

@@ -13,7 +13,7 @@
     "expandInnerObjects": true,
     "endpointPath": "runHuntingQuery",
     "postBody": {
-      "Query": "DeviceInfo | summarize arg_max(Timestamp, *) by DeviceId | where DeviceName != \"\""
+      "Query": "DeviceInfo | where isnotempty(DeviceName) | project Timestamp, DeviceId, DeviceName | summarize arg_max(Timestamp, *) by DeviceId"
     },
     "pathToData": "results",
     "getArgs": [],

plugins/MicrosoftDefender/v1/indexDefinitions/default.json

@@ -11,15 +11,7 @@
                 "name": "DeviceName",
                 "type": {
                     "value": "Device"
-                },
-                "properties": [
-                    "OSPlatform",
-                    "OSProcessor",
-                    "OSVersion",
-                    "PublicIP",
-                    "OSBuild",
-                    "OSArchitecture"
-                ]
+                }
             }
         }
     ]

plugins/MicrosoftDefender/v1/metadata.json

@@ -1,7 +1,7 @@
 {
     "name": "microsoft-defender",
     "displayName": "Microsoft Defender",
-    "version": "1.0.0",
+    "version": "1.0.2",
     "author": {
         "name": "SquaredUp Labs",
         "type": "labs"