Overview
In the recently published Remote Work Trend Report, Microsoft provided some interesting insights into how the shift into full-time remote work and learning has impacted the way we coll...
Updated Nov 02, 2021
Version 2.0
Blog Post
Can someone please advise where I can find the KQL query to generate the TeamsData info when I'm using the native Office365 Sentinel connector and not a logic app.
As I understand it the process is to create a function that generates theO365API_CL table and then save that as a function called TeamsData. My question is where do I find the syntax of the KQL query to generate the O365API_CL table in the first place?
i've been going around in circles for two days and I'm starting to feel very stupid... 🙂 Can anyone assist?