azure log analytics FileHash

Copper Contributor

FileHash in Azure log analytics just has sha256, is there a way to get Sha1 and or md5? Is this something configurable and how/where do we set that? Thanks


| where FileHash
2 Replies



The FileHash value is coming from the Security Event on that machine. Log Analytics doesn't calculate file hashes.


It is usually coming from here:



Meir :>

were you able to figure how to query and find hashes throughout the environment?