Query Details

Number Of Signed And Unsigned Drivers

Query

Use Case: Monitoring the distribution of signed versus unsigned drivers in a Windows environment.

Query:

WindowsDriver
| summarize Count=count() by Signed

Explanation

This query is used to monitor the number of signed and unsigned drivers in a Windows environment. It counts the occurrences of each type of driver and summarizes the results.

Details

Ugur Koc profile picture

Ugur Koc

Released: February 4, 2024

Tables

WindowsDriver

Keywords

WindowsDriver,Count,Signed

Operators

|,summarize,Count,count(),by

Actions