Forum Discussion
How can I share hunting query results with non-security persons in my org?
One approach to consider is using a reporting tool such as Microsoft Power BI to present the results of your Advanced Hunting queries in a secure and controlled manner.
Here's how you can set this up:
- Create a Power BI report that connects to the Advanced Hunting logs. You can do this by creating a new Power BI report and selecting the "Advanced Hunting" data source.
- Filter the data to show only the information that you want to share with your help desk. For example, you could create a report that shows only the machines that are causing account lockouts for failed logon events.
- Share the Power BI report with your help desk. You can do this by granting them access to the report through the Power BI service, or by embedding the report in a secure SharePoint site that they have access to.
This way, your help desk will have access to the relevant data without having access to the full Advanced Hunting logs, and you can control who has access to the data and what they can see. Additionally, Power BI provides a powerful and flexible reporting platform that you can use to create custom reports and visualizations, so you can tailor the data to meet the specific needs of your help desk.
Robina thank you for the tip! So, are you talking about making a data source like this in https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/api-power-bi?view=o365-worldwide#connect-power-bi-to-advanced-hunt or is there some inherent source that I can use. I don't see any "Advanced Hunting" data source when making a new report.