Forum Discussion
askvpb
May 07, 2024Brass Contributor
Help to Defender XDR - KQL to Detection rule for Vulnerability Notification
The query essentially functions as part of a monitoring, designed to identify and summarize list of vulnerable applications within a set time frame—particularly, events recorded in the current month....
askvpb
May 07, 2024Brass Contributor
Thanks Dylan, unfortunately I get he same error as the project ReportID and Timestamp value aren't available line 18
DylanInfosec
May 07, 2024Iron Contributor
Ahh, forgive me, I see the issue. There’s a ‘summarize’ command. Place those two extends after the summarize block you have. Maybe even right before the ‘project’ in case there are any changes made in the future.