Forum Discussion
Advanced Hunting Query - Negation
I am trying to formulate a query that returns email TLD that are NOT in a specified list. I have the following query which return those I am interested in: EmailEvents | where SenderFromDomain h...
Try this.
EmailEvents
| where not(SenderFromDomain has_any (".com", ".net", ".org", ".uk"))
