Query Details

Data By Provider

Query

SecurityAlert
| where ProviderName == "MCAS" 


SecurityAlert
| where ProviderName == "Office 365 Security & Compliance" 


SecurityAlert
| where ProviderName == "MDATP"

Explanation

The query is filtering the SecurityAlert table based on different ProviderNames such as MCAS, Office 365 Security & Compliance, and MDATP.