ss_prep, ss_message_enrich, and ss_generate_score_system macros are missing
| from datamodel:"Malware"."Malware_Attacks"
| where ('dest_priority'="high" OR 'dest_priority'="critical")
| search category=av.detect
| stats max(_time) as "lastTime",latest(_raw) as "orig_raw",values(dest_priority) as "dest_priority",count by "dest","signature","category"
| ss_prep("SSRG010")
|ss_message_enrich(1,dest)ss_generate_score_system(base_score,reliability,dest,dest_category,dest_priority)
ss_prep, ss_message_enrich, and ss_generate_score_system macros are missing
| from datamodel:"Malware"."Malware_Attacks" | where ('dest_priority'="high" OR 'dest_priority'="critical") | search category=av.detect | stats max(_time) as "lastTime",latest(_raw) as "orig_raw",values(dest_priority) as "dest_priority",count by "dest","signature","category" |
ss_prep("SSRG010")
|ss_message_enrich(1,dest)
ss_generate_score_system(base_score,reliability,dest,dest_category,dest_priority)