
Alex Norman
- Total activity 7
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 2
- Subscriptions 2
Activity overview
Latest activity by Alex Norman-
Alex Norman commented,
That works perfectly Rick, thanks! Here's the full query I ended up using, mostly based on your work. _sourceCategory=windows (4726 OR 4720)| parse regex "Computer = \"(?<computer_name>.*?)\";" | ...
-
Alex Norman commented,
Need more of these examples. These are great starting queries.
-
Alex Norman created a post,
AD query for user creation and deletion in short period of time
Hi, I'm trying to write a query that will detect (and eventually alert) when a user account has been quickly created and deleted on our AD domain. I'm guessing that this will have something to do w...