Untitled
unknown
plain_text
a year ago
340 B
7
Indexable
DeviceInfo | join kind=leftouter ( DeviceLogonEvents | summarize LastLogon = max(EventTime) by DeviceId ) on DeviceId | join kind=leftouter ( DeviceNetworkInfo | summarize MappedDrives = make_set(LocalPath) by DeviceId ) on DeviceId | project DeviceName = DeviceName, LoggedOnUser = LoggedOnUserName, MappedDrives
Editor is loading...
Leave a Comment