Forum Discussion
MDE Advanced Hunting - Device Network Events - Remote IP Details
Does anyone know of a way to query the MDE IP details through Advanced hunting? I am specifically looking to add an ASN column to my KQL search results for remote IP addresses.
Just wanted to bump this to see if there have been added any native way to do this with Microsoft's KQL.