Update Pivot from detections to related downloads.txt

microsoft · Apr 22, 2020 · 10f6dcb · 10f6dcb
1 parent 0228849
commit 10f6dcb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Delivery/Pivot from detections to related downloads.txt b/Delivery/Pivot from detections to related downloads.txt
@@ -22,7 +22,7 @@ let detectedDownloadsSummary =
 DeviceFileEvents
 | where isnotempty(FileOriginUrl)
 | project FileName, FileOriginUrl, DeviceId, Timestamp,
-          Host=tostring(parse_url(FileOriginUrl).Host)
+          Host=tostring(parse_url(FileOriginUrl).Host), SHA1 
 // Filter downloads from hosts serving detected files
 | join kind=inner(detectedDownloadsSummary) on Host
 // Filter out download file create events that were also detected.