Skip to content

Commit db67398

Browse files
authored
Merge pull request #4342 from MicrosoftDocs/maccruz-seenby
Update advanced-hunting-seenby-function.md
2 parents 71071ce + 2742010 commit db67398

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

defender-xdr/advanced-hunting-seenby-function.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,7 @@ This function returns a table that has the following column:
3939
|------------|---------------|-------------|
4040
| `DeviceId` | `string` | Unique identifier for the device in the service |
4141

42+
Up to 1,000 results are returned.
4243

4344
## Syntax
4445

@@ -49,7 +50,7 @@ invoke SeenBy(x)
4950
- where **x** is the device ID of interest
5051

5152
> [!TIP]
52-
> Enrichment functions will show supplemental information only when they are available. Availability of information is varied and depends on a lot of factors. Make sure to consider this when using SeenBy() in your queries or in creating custom detections. For best results, we recommend using the SeenBy() function with the DeviceInfo table.
53+
> Enrichment functions show supplemental information only when they're available. Availability of information is varied and depends on many factors. Make sure to consider this when using SeenBy() in your queries or in creating custom detections. For best results, we recommend using the SeenBy() function with the DeviceInfo table.
5354
5455
### Example: Obtain list of onboarded devices that have seen a device
5556

@@ -59,7 +60,7 @@ DeviceInfo
5960
| limit 100 | invoke SeenBy()
6061
```
6162

62-
## Related topics
63+
## Related articles
6364
- [Advanced hunting overview](advanced-hunting-overview.md)
6465
- [Learn the query language](advanced-hunting-query-language.md)
6566
- [Understand the schema](advanced-hunting-schema-tables.md)

0 commit comments

Comments
 (0)