Skip to content

Commit 13d7059

Browse files
Merge pull request #2706 from MicrosoftDocs/maccruz-cdadx
Update advanced-hunting-defender-use-custom-rules.md
2 parents cd0c9e0 + 02b8c63 commit 13d7059

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

defender-xdr/advanced-hunting-defender-use-custom-rules.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,9 @@ For example, to get the first 10 rows of data from the `StormEvents` table store
5757

5858
:::image type="content" source="/defender-xdr/media/adx-sample.png" alt-text="Screenshot of adx operator in advanced hunting." lightbox="/defender-xdr/media/adx-sample.png":::
5959

60+
> [!NOTE]
61+
> The `adx()` operator is not supported for custom detections.
62+
6063

6164
### Use arg() operator for Azure Resource Graph queries
6265
The `arg()` operator can be used to query across deployed Azure resources like subscriptions, virtual machines, CPU, storage, and the like.

0 commit comments

Comments
 (0)