More validation fixes
This commit is contained in:
Родитель
5a40beb13d
Коммит
692daefa1f
|
@ -19,6 +19,7 @@ query: |
|
|||
_Im_NetworkSession(hostname_has_any=v_Host_HostName)
|
||||
| where EventResult =~ "success"
|
||||
| where NetworkDirection =~ "Inbound"
|
||||
| extend LocalAppName = column_ifexists("LocalAppName", "")
|
||||
| extend info = pack('Computer', DvcHostname, 'LocalPortNumber', DstPortNumber, 'DstIpAddr', Dst, 'SrcIpAddr', Src,'Direction', NetworkDirection, 'NetworkProtocol', NetworkProtocol, "LocalAppName", LocalAppName)
|
||||
| summarize Process_Aux_Min_SessionStartTime=min(TimeGenerated), Process_Aux_Max_SessionStartTime=max(TimeGenerated), count(), IP_Aux_info = make_set(info, maxSize=1000) by Src, Dvc
|
||||
| top 10 by count_ desc
|
||||
|
|
Загрузка…
Ссылка в новой задаче