Update OracleDBAuditUsersNewPrivilegesAdded.yaml (#5328)
This commit is contained in:
Родитель
51f95445ac
Коммит
6becd96f54
|
@ -17,7 +17,7 @@ query: |
|
|||
OracleDatabaseAuditEvent
|
||||
| where TimeGenerated between (ago(lbtime_30d) .. ago(lbtime_1d))
|
||||
| where isnotempty(Privilege) and isnotempty(DstUserName)
|
||||
| summarize Privileges = makeset(Privilege) by DstUserName;
|
||||
| summarize Privileges = makeset(Privilege) by DstUserName
|
||||
| join (OracleDatabaseAuditEvent
|
||||
| where TimeGenerated > ago(lbtime_1d)
|
||||
| where isnotempty(DstUserName) and isnotempty(Privilege)
|
||||
|
|
Загрузка…
Ссылка в новой задаче