List all the vulnerabilities each device has in a pivot table

Description

This query returns a row for each device with the amount of Critical, High, Medium and Low Vulnerabilities that device has.

Query · kql

DeviceTvmSoftwareVulnerabilities
| project DeviceName, VulnerabilitySeverityLevel
| evaluate pivot(VulnerabilitySeverityLevel): (DeviceName: string,Critical: long, High: long, Medium: long, Low: long)
| sort by Critical, High, Medium, Low
Raw source List all the vulnerabilities each device has in a pivot table · KQL
Esc
Published by Bert-JanP/Hunting-Queries-Detection-Rules ↗, licensed under BSD 3-Clause ↗. Reproduced here unmodified. 
# List all the vulnerabilities each device has in a pivot table

## Query Information

#### Description
This query returns a row for each device with the amount of Critical, High, Medium and Low Vulnerabilities that device has.  

## Defender XDR
```
DeviceTvmSoftwareVulnerabilities
| project DeviceName, VulnerabilitySeverityLevel
| evaluate pivot(VulnerabilitySeverityLevel): (DeviceName: string,Critical: long, High: long, Medium: long, Low: long)
| sort by Critical, High, Medium, Low
```

Detection rules belong to the projects that publish them and remain under their own licenses. This site indexes and links to them; it claims no rights in them.