KQL Search

Query Details

Intune Device Threat Levelnot Secured

Query

//Intune Device Threat Level not Secured

IntuneDeviceComplianceOrg
| where isnotempty(DeviceHealthThreatLevel)
| where DeviceHealthThreatLevel != "Secured"
| project TimeGenerated , DeviceName , DeviceId , OS , UserName , DeviceHealthThreatLevel

Explanation

This query retrieves information about Intune devices that have a threat level that is not secured. It includes details such as the time the information was generated, device name, device ID, operating system, username, and the device's threat level.