MDA PM: fixing section "Investigate app usage in Microsoft 365 Defender with advanced hunting" #5 and #6 - Githubissues

MicrosoftDocs / CloudAppSecurityDocs

Public repo for CloudAppSecurityDocs-pr

Creative Commons Attribution 4.0 International

107 stars 155 forks source link

MDA PM: fixing section "Investigate app usage in Microsoft 365 Defender with advanced hunting" #5 and #6 #578

Closed Itaicitaic1 closed 2 years ago

Itaicitaic1 commented 2 years ago

Under the section "Investigate app usage in Microsoft 365 Defender with advanced hunting"

Item #5 kusto query should be changed to:

DeviceNetworkEvents | where RemoteUrl has_any ("") | order by Timestamp desc

the image in item #6: should be changed to the following: image section 6

[Enter feedback here]

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: c1cc6749-39e9-8a7e-298d-a75acb63c72e
Version Independent ID: b0388842-cc04-f09e-3ed3-f05d5d1c9164
Content: Investigate apps discovered by Microsoft Defender for Endpoint
Content Source: CloudAppSecurityDocs/mde-investigation.md
Service: defender-for-cloud-apps
GitHub Login: @dcurwin
Microsoft Alias: dacurwin

Itaicitaic1 commented 2 years ago

suggested the fix from Github directly :)