Share via


EmailEvents 數據表的查詢

來自前10個發件者網域的網路釣魚電子郵件

從前十個發件者網域取得網路釣魚電子郵件數目。

EmailEvents
| where ThreatTypes has "Phish"
| summarize Count = count() by SenderFromDomain
| top 10 by Count 

具有惡意代碼的電子郵件

從前十個發件者網域取得網路釣魚電子郵件數目。

EmailEvents
| where ThreatTypes has "Malware"
| limit 500