Cortex XDR XQL Query
Hi,
I wanna sort my query as operational_status in (UNPROTECTED, PARTIALLY_PROTECTED) everyday (Like from Monday to Sunday Statistics)
My query looks like this
config case_sensitive = false
| dataset = endpoints
| filter operational_status in (UNPROT