Query Details
Direct Agent
Query
Heartbeat | where Category == "Direct Agent" | distinct Computer , Category , OSType , OSMajorVersion , OSMinorVersion
Explanation
This query selects the Heartbeat events where the Category is "Direct Agent" and retrieves unique values for the Computer, Category, OSType, OSMajorVersion, and OSMinorVersion fields.
Details
Rod Trent
Released: March 26, 2020
Tables
Heartbeat
Keywords
Heartbeat,Category,DirectAgent,Computer,OSType,OSMajorVersion,OSMinorVersion
Operators
| where==distinct,