Skip to content

Instantly share code, notes, and snippets.

@lawndoc

lawndoc/pa-silent-registration.kql

Created August 15, 2022 18:19
Show Gist options
  • Save lawndoc/ac450998f6c725afd88287e9e49fb49f to your computer and use it in GitHub Desktop.
Save lawndoc/ac450998f6c725afd88287e9e49fb49f to your computer and use it in GitHub Desktop.
Download ZIP
Detect silent registration of Power Automate to a remote MDM
Raw
pa-silent-registration.kql
DeviceProcessEvents
| where FileName =~ "PAD.MachineRegistration.Silent.exe"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment