Sentinel-Queries
Sentinel-Queries copied to clipboard
Group name occasionally null
Function-GroupChanges.kql
For some reason it looks like the group name in the targetedresources json appears as null. it looks like the event either puts it in new value or old value. Not sure what the logic is within Azure as to why that is.