Skip to content

Instantly share code, notes, and snippets.

@nathanmcnulty

nathanmcnulty/TVM KQL

Last active September 30, 2021 04:01
Show Gist options
  • Save nathanmcnulty/3287ebe3f46d1ac8553d44f28e372822 to your computer and use it in GitHub Desktop.
Save nathanmcnulty/3287ebe3f46d1ac8553d44f28e372822 to your computer and use it in GitHub Desktop.
Download ZIP
Show highest impact improvements from TVM
Raw
TVM KQL
DeviceTvmSecureConfigurationAssessmentKB
| join (DeviceTvmSecureConfigurationAssessment | where IsCompliant == 0) on ConfigurationId
| summarize Devices = make_list(DeviceName), DeviceCount = dcount(DeviceName) by ConfigurationId, ConfigurationName, ConfigurationImpact, ConfigurationCategory, ConfigurationSubcategory, tostring(ConfigurationBenchmarks), RemediationOptions
| extend Impact = ConfigurationImpact * DeviceCount
| sort by Impact desc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment