KQL Hunting URLS Queries
UrlClickEvents
| where Url matches regex @"(?i)click"
| project Url, AccountUpnUrlClickEvents
| where Url matches regex @"https?://(?:www\.)?[a-zA-Z0-9]+\.[a-zA-Z0-9]+.*"
| project Url, AccountUpnLast updated
UrlClickEvents
| where Url matches regex @"(?i)click"
| project Url, AccountUpnUrlClickEvents
| where Url matches regex @"https?://(?:www\.)?[a-zA-Z0-9]+\.[a-zA-Z0-9]+.*"
| project Url, AccountUpnLast updated