Hello All,
I have a requirement to retrieve all Devices that is using 7zip. Below is my query:
DeviceProcessEvents
| where FileName in~ ("7z.exe")
The problem is that it returns duplicate device names as shown below:
I would like to return all unique devices that has 7z.exe without the duplicates. Can someone assist?