Core Infrastructure and Security Blog

Options
893
HoussemDellai on Apr 22 2024 09:00 AM
7,783
Jerry Devore on Apr 15 2024 03:01 PM
2,675
WillAftring on Apr 08 2024 06:41 AM
2,822
BrandonWilson on Apr 06 2024 07:24 PM
1,851
PavelYurenev on Apr 04 2024 09:00 AM
4,549
hspinto on Apr 01 2024 12:00 AM
2,566
khgandhi on Mar 28 2024 09:46 AM
2,005
Bruno Gabrielli on Mar 21 2024 01:00 AM
14.7K
Paul Bergson on Mar 19 2024 04:30 AM
3,584
fbinotto on Mar 14 2024 01:30 AM
5,252
PaulHarrison on Mar 11 2024 03:00 AM
3,841
sairashaik on Mar 06 2024 06:01 PM
13.1K
Jerry Devore on Mar 04 2024 06:38 AM
24.4K
Jason Cody on Feb 29 2024 07:12 AM
4,258
jonasoh on Feb 26 2024 03:35 AM
2,727
BrandonWilson on Feb 21 2024 08:22 PM
34.2K
DagmarHeidecker on Feb 19 2024 04:15 AM
15.6K
BrandonWilson on Feb 18 2024 04:35 PM
5,269
Arnab Mitra on Feb 15 2024 11:59 AM
5,419
hspinto on Feb 12 2024 12:00 AM
15.5K
Paul Bergson on Feb 05 2024 04:13 AM
26.1K
Paul Bergson on Jan 29 2024 05:20 AM
3,546
Bindusar on Jan 23 2024 08:27 AM
6,678
Arnab Mitra on Jan 18 2024 08:50 AM
3,540
jonasoh on Jan 15 2024 03:31 AM
7,242
jonasoh on Jan 08 2024 05:18 AM
15.8K
BrandonWilson on Jan 07 2024 10:40 AM
5,848
Arnab Mitra on Jan 03 2024 01:39 PM
16.4K
BrandonWilson on Dec 22 2023 02:13 PM
8,458
wernerrall on Dec 17 2023 11:00 PM

Latest Comments

Hi @NigelB18 yes that should be doable. In general, I think I would try adding an $orderby= to the Initialize Nextlink variable step that stores the graph api query to order by the passwordCredentials/items/endDateTime and keyCredentials/items/endDateTime. https://learn.microsoft.com/en-us/graph/que...
0 Likes
@hewagen Is it safe to assume that the ability to maintain both carries on in to new versions of the ADMIX files, such as for Windows 11 23H2?
0 Likes
Hello @Russ Rimmerman thanks for this! Quick question, is it possible to sort the data by the days left till expiration? So that the ones closer to expiration appear first.
0 Likes
@Ciyaresh Thanks for responding. Did you create a data collection rule through Windows Forwarded Events connector? >>> Yes, I selected security events in the DCR and filtered with some custom event IDs. However, I've tried selecting All events too but the WindowsEvents table shows empty. Did you ver...
0 Likes