Please update the code in the training to match with the right criterias

FALLOT, Mickael 25 Reputation points
2023-12-28T16:28:22.4533333+00:00

Dear Training team,

Thank you for the applied skills trainings.

The code provided in this applied skills page needs to be updated (https://learn.microsoft.com/en-us/training/modules/analyze-data-in-sentinel/8-exercise-detect-threats)

Currently

AzureActivity
| where OperationName == "MICROSOFT.COMPUTE/VIRTUALMACHINES/DELETE"
| where ActivityStatus == "Success"

Should be

AzureActivity
| where OperationNameValue == "MICROSOFT.COMPUTE/VIRTUALMACHINES/DELETE"
| where ActivityStatusValue == "Success"

Best regards,

Mick

Azure Training
Azure Training
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Training: Instruction to develop new skills.
2,026 questions
{count} vote

Accepted answer
  1. Srinud 3,615 Reputation points Microsoft Vendor
    2024-01-13T09:47:33.48+00:00

    Hi FALLOT, Mickael,

    Thank you very much for your patience. We have reached out to the content author and conveyed your concerns. He has made the necessary changes as shown below: User's image

    If you have found the answer provided to be helpful, please click on the "Accept answer/Upvote" button so that it is useful for other members in the Microsoft Q&A community.

    Thank you.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.