mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-22 22:03:46 +00:00
Update advanced-hunting-query-language.md
This commit is contained in:
@ -74,7 +74,7 @@ The first piped element is a time filter scoped to the previous seven days. Limi
|
||||
### Check specific processes
|
||||
The time range is immediately followed by a search for process file names representing the PowerShell application.
|
||||
|
||||
```
|
||||
```kusto
|
||||
// Pivoting on PowerShell processes
|
||||
| where FileName in~ ("powershell.exe", "powershell_ise.exe")
|
||||
```
|
||||
|
Reference in New Issue
Block a user