Forum Discussion

Jan_F1801's avatar
Jan_F1801
Copper Contributor
May 17, 2023

Tags in an Advanced hunting query

The only answer I find so far on the subject was written over 2 1/2 years ago, so I create a new post.

Is it now possible to evaluate and process tags attached to a resource by query?
With reference to this old request: https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/advanced-hunting-query-to-include-assigned-tags/m-p/2059566

We have built a query that works well at least for our notebooks, but for VM's would need the evaluation of the tag.

1 Reply

Resources