Query Details
# Top 100 devices with the most browser extensions installed
----
### Defender For Endpoint
```
DeviceTvmBrowserExtensions
| summarize
TotalExtensions = dcount(ExtensionId),
ExtensionNames = make_set(ExtensionName)
by DeviceId
| join DeviceInfo on DeviceId
| project DeviceName, TotalExtensions, ExtensionNames
| top 100 by TotalExtensions
```
This query finds the top 100 devices that have the most browser extensions installed. It counts the number of unique extensions for each device and also lists the names of those extensions. Then it joins this information with the device details and projects the device name, total extensions, and extension names. Finally, it sorts the result by the total number of extensions and returns the top 100 devices.

Bert-Jan Pals
Released: February 14, 2023
Tables
Keywords
Operators