Query Details

Most common installed cricital extensions visualised

Visualization Browser Extension Most Common Cricital Extensions

Query

DeviceTvmBrowserExtensions
| where ExtensionRisk == "Critical"
| summarize count() by ExtensionName
| render piechart with(title="Most Common Critical Extentions")

About this query

Most common installed cricital extensions visualised


Defender XDR

Explanation

This query is designed to identify and visualize the most frequently installed browser extensions that are considered "Critical" in terms of risk. It does this by:

  1. Accessing data from the DeviceTvmBrowserExtensions table.
  2. Filtering the data to only include extensions that have a risk level labeled as "Critical."
  3. Counting the number of times each critical extension appears.
  4. Displaying the results in a pie chart titled "Most Common Critical Extensions," which helps to easily visualize which critical extensions are most prevalent.

Details

Bert-Jan Pals profile picture

Bert-Jan Pals

Released: December 1, 2024

Tables

DeviceTvmBrowserExtensions

Keywords

DeviceTvmBrowserExtensionsExtensionRiskName

Operators

wheresummarizebyrenderwith

Actions

GitHub