Incorrect information about AZR501.3 detection query
Opened this issue · 0 comments
Palciny commented
Documented query will not fetch any results.
AzureActivity | where Properties_d has 'vmaccesswindowspasswordreset'
Log vmaccesswindowspasswordreset is not present in Properties_d.