Query Details
Weird Correlation Id
Query
SigninLogs | where CorrelationId == "ff000000-0000-0000-0000-000000000000" //AppId == "22098786-6e16-43cc-a27d-191a01a1e3b5" // Microsoft To-Do client
Explanation
This query is searching for SigninLogs where the CorrelationId is equal to "ff000000-0000-0000-0000-000000000000" and the AppId is equal to "22098786-6e16-43cc-a27d-191a01a1e3b5" which represents the Microsoft To-Do client.
Details
Jose Sebastián Canós
Released: January 4, 2024
Tables
SigninLogs
Keywords
SigninLogs,CorrelationId,AppId,MicrosoftTo-Do
Operators
where==