Blog Post

Microsoft Sentinel Blog
6 MIN READ

Enriching Windows Security Events with Parameterized Function

JeremyTan's avatar
JeremyTan
Icon for Microsoft rankMicrosoft
Sep 29, 2020
  Overview   Monitoring Windows Security Auditing logs is essential in helping SOC analysts to keep track of any unplanned changes in a computer's system audit policy settings. If there is an i...
Updated Nov 02, 2021
Version 4.0
hunting
investigation
microsoft sentinel
security
John_McCash's avatar
John_McCash
Copper Contributor
Oct 08, 2020

And that's one question answered: Running the script twice with the same function name appears to create a 2nd function with the same name. You have been warned... :sad:
In the above case, attempting to execute the function by name returns the following error:

Detected multiple functions with the same name: 'name'. Resolve the conflict to allow these functions to be used in a query.

If issue persists, please open a support ticket. Request id: id