Connectivity Failures by Domain

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query is designed to help troubleshoot connectivity issues to Microsoft Defender for Endpoint URLs. It provides a summary of the number of failures which occurred, the number of distinct machines that failed to connect to the URL, and sorts them by the sum of the overall number of failures recorded.

Attribute Value
Type Hunting Query
Solution GitHub Only
ID a4f7b0f0-93ad-47c9-bcce-dc08d8d04818
Tactics Malware, component
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Troubleshooting/Connectivity%20Failures%20by%20Domain.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries