Skip to content

Commit

Permalink
Update KQL_DefenderDailyOperationsSample.yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
KwachSean authored Apr 8, 2024
1 parent d0f1d51 commit 5746371
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -29,12 +29,12 @@ SkillGroups:
Description: Fetches the latest emails received by the user with the specified email address
Inputs:
- Name: email
Description: The email address of the recipient - e.g. sojesh@contoso.com
Description: The email address of the recipient - e.g. xxxxxxx@contoso.com
Required: true
Settings:
Target: Defender
Template: |-
EmailEvents
| where RecipientEmailAddress =~ '{{email}}'
| project Timestamp, NetworkMessageId, SenderFromAddress, SenderDisplayName, Subject, DeliveryLocation
| top 100 by Timestamp desc
| top 100 by Timestamp desc

0 comments on commit 5746371

Please sign in to comment.