Skip to content

Commit d5b1dd7

Browse files
committed
Update
1 parent 72d59d3 commit d5b1dd7

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

defender-xdr/advanced-hunting-defender-use-custom-rules.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -52,13 +52,11 @@ Read [Query data in Azure Resource Graph by using arg()](/azure/azure-monitor/lo
5252

5353
In the query editor, enter *arg("").* followed by the Azure Resource Graph table name.
5454

55-
```Kusto
56-
arg("").<Azure-Resource-Graph-table-name>
57-
```
55+
For example:
5856

5957
:::image type="content" source="/defender/media/arg-operator.png" alt-text="Screenshot of arg operator in advanced hunting." lightbox="/defender/media/arg-operator.png":::
6058

61-
You can then, for instance, filter a query that searches over Microsoft Sentinel data based on the results of an Azure Resource Graph query:
59+
You can also, for instance, filter a query that searches over Microsoft Sentinel data based on the results of an Azure Resource Graph query:
6260

6361
```Kusto
6462
arg("").Resources

0 commit comments

Comments
 (0)