Update ExcessiveNXDOMAINDNSQueries.yaml (#1021)
* Update ExcessiveNXDOMAINDNSQueries.yaml fix query * Update ExcessiveNXDOMAINDNSQueries.yaml
This commit is contained in:
Родитель
182d9a9b3c
Коммит
00ee8cf5f0
|
@ -33,4 +33,4 @@ query: |
|
|||
| where isnotempty(ResponseCode)
|
||||
| where ResponseCode =~ "NXDOMAIN"
|
||||
) on Client_IP
|
||||
| extend timestamp = TimeGenerated, extend IPCustomEntity = Client_IP
|
||||
| extend timestamp = TimeGenerated, IPCustomEntity = Client_IP
|
||||
|
|
Загрузка…
Ссылка в новой задаче