Query Details
Network Info Per Device
Query
DeviceNetworkInfo
| where DeviceName contains "PCNAME"
| where TimeGenerated > ago (90d)
| where NetworkAdapterType == "Wireless80211"
| where ConnectedNetworks != ''
| extend ParsedNetwork = parse_json(ConnectedNetworks)
| extend NetworkName = tostring(ParsedNetwork[0].Name),
Description = tostring(ParsedNetwork[0].Description),
IsConnectedToInternet = toboolean(ParsedNetwork[0].IsConnectedToInternet),
Category = tostring(ParsedNetwork[0].Category)
| project Timestamp, DeviceName, NetworkAdapterName, NetworkName, Description, IsConnectedToInternet, Category, IPAddresses, MacAddress
| order by Timestamp desc
Explanation
This query is designed to retrieve and display information about wireless network connections for a specific device over the past 90 days. Here's a simple breakdown:
-
Source Table: The query starts with the
DeviceNetworkInfotable, which contains network-related data for devices. -
Filter by Device Name: It filters the data to include only records where the device name contains "PCNAME".
-
Filter by Time: It further narrows down the data to include only records generated in the last 90 days.
-
Filter by Network Type: It selects only those records where the network adapter type is "Wireless80211", indicating a wireless connection.
-
Exclude Empty Networks: It excludes records where there are no connected networks.
-
Parse Connected Networks: It parses the JSON data in the
ConnectedNetworksfield to extract detailed information about the network. -
Extract Network Details: It extracts specific details from the parsed JSON, including:
NetworkName: The name of the network.Description: A description of the network.IsConnectedToInternet: A boolean indicating if the network is connected to the internet.Category: The category of the network.
-
Select and Order Columns: It selects specific columns to display:
Timestamp,DeviceName,NetworkAdapterName,NetworkName,Description,IsConnectedToInternet,Category,IPAddresses, andMacAddress. The results are ordered byTimestampin descending order, showing the most recent records first.
In summary, this query provides a detailed view of wireless network connections for a particular device over the last 90 days, including network names, descriptions, internet connectivity status, and other relevant details.
Details
Daniel Card
Released: February 27, 2025
Tables
Keywords
Operators