Kueri untuk tabel ProtectionStatus

Untuk informasi tentang menggunakan kueri ini di portal Azure, lihat tutorial Analitik Log. Untuk REST API, lihat Kueri.

Tanda tangan kedaluwarsa

Perangkat dengan Tanda Tangan kedaluarsa.

// To create an alert for this query, click '+ New alert rule'
ProtectionStatus
| summarize Rank = max(ProtectionStatusRank) by Computer, _ResourceId
| where Rank == "250"

Pembaruan Status Perlindungan

Pembaruan Status Perlindungan per hari.

// To create an alert for this query, click '+ New alert rule'
ProtectionStatus
| summarize AggregatedValue = count(ScanDate) by bin(TimeGenerated, 1d), Computer, _ResourceId
| sort by TimeGenerated desc

Deteksi perangkat lunak jahat

Malware terdeteksi dikelompokkan berdasarkan ancaman.

// To create an alert for this query, click '+ New alert rule'
ProtectionStatus
| where ThreatStatus != "No threats detected" 
| summarize AggregatedValue = count() by Threat, Computer, _ResourceId