Untitled

DeviceInfo
| join kind=leftouter (
    DeviceLogonEvents
    | summarize LastLogon = max(EventTime) by DeviceId
) on DeviceId
| join kind=leftouter (
    DeviceNetworkInfo
    | summarize MappedDrives = make_set(LocalPath) by DeviceId
) on DeviceId
| project DeviceName = DeviceName, LoggedOnUser = LoggedOnUserName, MappedDrives