Query Details
Use Case: Monitoring the distribution of signed versus unsigned drivers in a Windows environment. Query: WindowsDriver | summarize Count=count() by Signed
This query is used to monitor the number of signed and unsigned drivers in a Windows environment. It counts the occurrences of each type of driver and summarizes the results.

Ugur Koc
Released: February 4, 2024
Tables
Keywords
Operators