mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-22 22:03:46 +00:00
Update advanced-hunting-query-language.md
This commit is contained in:
@ -74,7 +74,7 @@ The first piped element is a time filter scoped to the previous seven days. Limi
|
|||||||
### Check specific processes
|
### Check specific processes
|
||||||
The time range is immediately followed by a search for process file names representing the PowerShell application.
|
The time range is immediately followed by a search for process file names representing the PowerShell application.
|
||||||
|
|
||||||
```
|
```kusto
|
||||||
// Pivoting on PowerShell processes
|
// Pivoting on PowerShell processes
|
||||||
| where FileName in~ ("powershell.exe", "powershell_ise.exe")
|
| where FileName in~ ("powershell.exe", "powershell_ise.exe")
|
||||||
```
|
```
|
||||||
|
Reference in New Issue
Block a user