Query Details

Find All System Processes Related To Defender Sense Or Security

Query

// Use Case: Identifying security-related processes in a system log for further analysis or monitoring.
Process
| where ProcessName contains 'Defender' or ProcessName contains 'Sense' or ProcessName contains 'Security'

Explanation

This query is designed to search through system logs to find processes that are related to security. Specifically, it looks for any process whose name includes the words 'Defender', 'Sense', or 'Security'. This helps in identifying and monitoring security-related activities within the system.

Details

Ugur Koc profile picture

Ugur Koc

Released: December 13, 2024

Tables

Process

Keywords

ProcessProcessNameDefenderSenseSecurity

Operators

|wherecontainsor

Actions

GitHub