Skip to content

Instantly share code, notes, and snippets.


sakaldeepyadav/ Secret

Last active Jun 5, 2020
What would you like to do?
| where TimeGenerated > ago(7d)
| where Name == "LaunchExecutable"
| extend App = parse_json(Parameters).filename
| summarize Usage=count(UserName) by tostring(App)
| sort by Usage desc
| render columnchart
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.