updating KQL in readme
This commit is contained in:
Родитель
26a57bbbef
Коммит
1ace136e82
|
@ -31,10 +31,10 @@ SentinelGithub
|
||||||
|
|
||||||
***KQL Query***
|
***KQL Query***
|
||||||
```
|
```
|
||||||
let MSFTServices = (externaldata(Alert: string, Description: string, Tactics:string, Severity:string, Provider:string, DetectionService: string)
|
let MSFTBuiltinAlerts = (externaldata(Alert: string, Description: string, Tactics:string, Severity:string, Provider:string, DetectionService: string)
|
||||||
[@"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Tools/MITREATT%26CK-LayerGeneration-Notebook/MSFT-Builtin-Alerts.csv"]
|
[@"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Tools/MITREATT%26CK-LayerGeneration-Notebook/MSFT-Builtin-Alerts.csv"] with (format="csv", ignoreFirstRecord=True)
|
||||||
);
|
);
|
||||||
MSFTServices
|
MSFTBuiltinAlerts
|
||||||
```
|
```
|
||||||
|
|
||||||
## Setup
|
## Setup
|
||||||
|
|
Загрузка…
Ссылка в новой задаче