Query Details

Expired Password

Query

SigninLogs
| where ResultType == "50055"
| project UserDisplayName, UserPrincipalName

Explanation

This query retrieves the SigninLogs where the ResultType is equal to "50055" and projects the UserDisplayName and UserPrincipalName.

Details

Rod Trent profile picture

Rod Trent

Released: September 23, 2020

Tables

SigninLogs

Keywords

SigninLogs,ResultType,UserDisplayName,UserPrincipalName

Operators

|,where,==,project

Actions