Resources
If you prefer not to write KQL queries manually and don’t have access to Microsoft Security Copilot, which can generate queries from natural language prompts, please check out https://www.kqlsearch.com/devicequery. It offers a well-organized collection of pre-built KQL queries tailored for Intune’s Device query feature, making it easier to get started and accelerate your analysis.
For reference, I highly recommend checking out Rudy Ooms’ insightful blogs on this topic at https://call4cloud.nl.
For a deeper dive into integrating Intune analytics with Power BI and to access a reference script that can be used within an Azure runbook to extract data from the Intune service and load it into Azure Cosmos DB, we recommend checking out Michael Meier’s blog post: https://mikemdm.de/2024/07/07/power-bi-intune-endpoint-analytics-reporting-series-part-7/. His guide provides step-by-step instructions along with the necessary script, making it easier...