Skip to content

Commit 482b26d

Browse files
typo fix
1 parent e9cb4e4 commit 482b26d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-xdr/advanced-hunting-best-practices.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -211,7 +211,7 @@ Example query:
211211
// Step 1: Select a specific parent process instance (for instance, powershell.exe).
212212
let parentProcess =
213213
DeviceProcessEvents
214-
| where FileName =~ "powershell.exe" // For your specific usecase, consider modifying the FileName and adding more identifying properties to specify your query.
214+
| where FileName =~ "powershell.exe" // For your specific use case, consider modifying the FileName and adding more identifying properties to specify your query.
215215
| where isnotempty(ProcessUniqueId)
216216
| top 1 by Timestamp asc
217217
| project DeviceId, DeviceName, ParentProcessUniqueId = ProcessUniqueId, ParentFileName = FileName;

0 commit comments

Comments
 (0)