Isempty
Query
SecurityAlert
| where isempty(ProviderName)
| project AlertName, SourceComputerId, ProviderNameExplanation
This query is looking at a table called SecurityAlert and filtering out any rows where the ProviderName column is empty. It then selects and displays the AlertName, SourceComputerId, and ProviderName columns from the remaining rows.