Skip to content

Commit c58ad24

Browse files
Merge branch 'main' into mdvm-trial
2 parents b05b38f + e4e0323 commit c58ad24

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-endpoint/attack-surface-reduction-rules-deployment-operationalize.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ If you want to focus on the AsrOfficeChildProcess rule and get details on the ac
7373

7474
```kusto
7575
DeviceEvents
76-
| where (Actiontype startswith "AsrOfficechild")
76+
| where (ActionType startswith "AsrOfficechild")
7777
| extend RuleId=extractjson("$Ruleid", AdditionalFields, typeof(string))
7878
| project DeviceName, FileName, FolderPath, ProcessCommandLine, InitiatingProcessFileName, InitiatingProcessCommandLine
7979
```

0 commit comments

Comments
 (0)