← Back to Explore
kqlHunting
End of Support software used
End of Support software used
Detection Query
DeviceTvmSoftwareInventory
| where EndOfSupportStatus == "EOS Version" or EndOfSupportStatus ==
"EOS Software"
| summarize TotalDevices = count(), EOS_Devices = make_set(DeviceName)
by SoftwareName, SoftwareVersion
| sort by TotalDevicesData Sources
DeviceTvmSoftwareInventory
Platforms
windowsazure-sentinelmicrosoft-defender
Tags
vulnerability-management
Raw Content
# End of Support software used
## Query Information
#### Description
End of Support software used
## Defender XDR
```KQL
DeviceTvmSoftwareInventory
| where EndOfSupportStatus == "EOS Version" or EndOfSupportStatus ==
"EOS Software"
| summarize TotalDevices = count(), EOS_Devices = make_set(DeviceName)
by SoftwareName, SoftwareVersion
| sort by TotalDevices
```
## Sentinel
```KQL
DeviceTvmSoftwareInventory
| where EndOfSupportStatus == "EOS Version" or EndOfSupportStatus ==
"EOS Software"
| summarize TotalDevices = count(), EOS_Devices = make_set(DeviceName)
by SoftwareName, SoftwareVersion
| sort by TotalDevices
```