KQL Search

Query Details

Expired Password

Query

SigninLogs
| where ResultType == "50055"
| project UserDisplayName, UserPrincipalName

Explanation

This query retrieves the SigninLogs where the ResultType is equal to "50055" and projects the UserDisplayName and UserPrincipalName.

Details

Rod Trent profile picture

Rod Trent

Released: September 23, 2020

Tables

SigninLogs

Keywords

SigninLogsResultTypeUserDisplayNameUserPrincipalName

Operators

|where==project

Actions

GitHub