Skip to content

Commit 4ad1445

Browse files
authored
Merge pull request #4636 from anderagto-hub/docs-editor/run-advanced-query-api-1754003746
Update run-advanced-query-api.md
2 parents 530c46b + 6b0ce3d commit 4ad1445

File tree

1 file changed

+4
-6
lines changed

1 file changed

+4
-6
lines changed

defender-endpoint/api/run-advanced-query-api.md

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ ms.topic: reference
1616
ms.subservice: reference
1717
ms.custom: api
1818
search.appverid: met150
19-
ms.date: 12/18/2020
19+
ms.date: 08/18/2025
2020
---
2121

2222
# Advanced hunting API
@@ -105,13 +105,11 @@ POST https://api.securitycenter.microsoft.com/api/advancedqueries/run
105105
```
106106

107107
```json
108+
108109
{
109-
"Query":"DeviceProcessEvents
110-
|where InitiatingProcessFileName =~ 'powershell.exe'
111-
|where ProcessCommandLine contains 'appdata'
112-
|project Timestamp, FileName, InitiatingProcessFileName, DeviceId
113-
|limit 2"
110+
"Query":"DeviceProcessEvents |where InitiatingProcessFileName =~ 'powershell.exe' |where ProcessCommandLine contains 'appdata'|project Timestamp, FileName, InitiatingProcessFileName, DeviceId|limit 2"
114111
}
112+
115113
```
116114

117115
### Response example

0 commit comments

Comments
 (0)