Advanced Hunting To check when a process has been run

DeviceProcessEvents
| where FileName == "azuredatastudio.exe"

(No Ratings Yet)

Andrea Rochira Well, this solution still works in 2023 and better than PowerShell! Thank you.
Copy file to workstations with Windows Intune · September 19, 2023
Emre Temel Thank you for this information. You save my life. 🙂
Exchange Setup – A required audit event could not be generated for the operation · September 18, 2023
Ilya L Missing \ before *, other than that, 👍. Schedule it to run monthly via Task Scheduler... 👍👍
Script to Delete ServiceWorker Cache on Google Chrome and Microsoft Edge · August 20, 2023
jack Thank you paris, one server got stuck on the SSPI failed and the solutution fixed it!!
Using Powershell to Send Emails via Mimecast · August 2, 2023
Maurece The information I needed when I needed it, Thanks Pariswells.com
Mimecast – Relaying from External to External using a forward ( External Relay ) · April 13, 2023