Defender for Endpoint - hunting - windows credential manager event

Microsoft

Hi, 

 

Is there a way to get events related to Windows Credential manager through KQL hunting query (D365)? 

 

Thanks 

 

0 Replies