Why is my KQL Advance query erroring out?
This query is meant to show me a short amount of time where a file was created and deleted/rename itself, but it just throwing an error “An unexpected error occurred during query execution. Please try again in a few minutes.”:
How can I default a KQL Defender Vulnerability Summary to zero?
I’ve created a hunting query that that tallies the number of Critical and High severity vulnerabilities up per device. Using this is quicker that the GUI and was fun to dip my feet in kql a bit. It works great, except if a device has no vulnerabilities, it simply won’t appear in the results. What is the best way of going about getting all devices to appear and if they have zero vulnerabilities to display a 0?
KQL Defender Vulnerability Summary
Hope you can help. Im new to KQL and need some help. I’ve created a hunting query that that tally’s the number of Critical and High severity vulnerabilities up per device. Using this is quicker that the GUI and was fun to dip my feet in kql a bit. It works great, except if a device has no vulnerabilities, it simply wont appear in the results. What is the best way of going about getting all devices to appear and if they have zero vulnerabilities to display a 0?