Forum Discussion
KQL that shows an Exemptions description and Created by within Exemption policy
We have several exemptions that were initiated by a former employee that we need to evaluate. We have over 4K and some are implemented at the subscription level and others at the resource. I have b...
| extend description = trim(" ", tostring(properties.metadata.description))
The "createdby" isn't listed in the api, so it probably comes from another place https://learn.microsoft.com/en-us/rest/api/defenderforcloud/assessments/list?tabs=HTTP
The "createdby" isn't listed in the api, so it probably comes from another place https://learn.microsoft.com/en-us/rest/api/defenderforcloud/assessments/list?tabs=HTTP
Thank you for the information. I wonder who could advise on the Created by field. Cheers