List All Global Admins In Your Tenant
Description This KQL query lists all accounts that have the Global Admin role assigned to their account. If you have
Read MoreWhere Every Failure Becomes A Manual
Description This KQL query lists all accounts that have the Global Admin role assigned to their account. If you have
Read MoreDescription This KQL query list all role additions that have been performed in your tenant. See the Microsoft Link for
Read MoreDescription This KQL query lists the top N (based on LatestNChanges) with the longest time between now and their last password
Read MoreDescription This KQL query is aimed to improve the false positive ratio you have in Sentinel. The query list all
Read MoreDescription This KQL query check for failures in Analytics Rules. Query Microsoft Sentinel References
Read MoreDescription The results of this KQL query provide insight in the top 10 incidents that have been triggered in your
Read MoreDescription This KQL query can be used to detect new UserAgents that have been used to perform sign in activities
Read MoreDescription This KQL query lists the devices that are on-boarded in Intune and classifies them based on the status of
Read MoreDescription This KQL query lists devices that can be on-boarded to Defender For Endpoint and have recently been detected. You
Read More