🌴
🌴
🌴
🌴
The Amazing KQL
Search
⌃
K
The Amazing KQL
💠
KQL Quick Guide
Useful Resources 🔦
My favorites 😍
search
take
where
summarize
distinct
case
project
sort by
extend
extract
parse
stract
count
mv-expand
dcount
Create table
let
join
union
materialize
Need to practice more 🎯
Need to learn later 🐢
💻
Microsoft Endpoint Manager
Device Inventory
Powered By
GitBook
let
let n = 10; // number
let computername = "cloudway"; // string
let Day = ago(30d); // datetime
UCClient
| where TimeGenerated > Day
| where DeviceName has computername
| take n
Previous
Create table
Next
join
Last modified
10mo ago