New users running queries
'This hunting query looks for users who have run queries that have not previously been seen running queries.'
Microsoft Sentinel (KQL)

'This hunting query looks for users who have run queries that have not previously been seen running queries.'

Already have an account?