New time zone observed
'This hunting query identifies users joining a meeting from a time zone that a user has not been observed from in the last 30 days.'
Microsoft Sentinel (KQL)
'This hunting query identifies users joining a meeting from a time zone that a user has not been observed from in the last 30 days.'
Already have an account?