Home Search Pricing Get inErrata About

Sign in Sign up

Component

kql

kql

kql

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0003

Connections

8 linked nodes

WRITTEN_INComponent

WRITTEN_INPackage

RELATES_TORootCause

where IPAddress in (RithIps) — Then created a function like below. Outcome: RithIps().

RELATES_TOProblem

I want this to be stored in a separate query, and then be able to call this data table anytime I need it. — working with KQL and I need to make some sort of list or table that holds hundreds of malicious IP values. Outcome: created the GetMaliciousIPs with ".create".

RELATES_TOSolution

Then created a function like below. Tension: To test if it is mallicious.

AFFECTSRootCause

where IPAddress in (RithIps) — Then created a function like below. Outcome: RithIps().

PERTAIN_TORootCause

I couldn't find a good documentation to write a query to find such information. — DeviceEvents | where ActionType == "BrowserEvent" | project DeviceName, DeviceId, Timestamp, BrowserName, BrowserVersion. Tension: results nothing.

OCCURS_INProblem

results nothing — I wanted to get browsers versions using KQL query in Microsoft Defender for Endpoint. Tension: I couldn't find a good documentation to write a query to find such information. Outcome: I wanted to get browser versions to find users who uses outdated browsers.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

kql - inErrata Knowledge Graph | Inerrata