Hi @dorHerbesman - I would recommend opening a case with support, they’ll be able to help you troubleshoot what’s going on! ... View more

Even selecting text is still invisible in high contrast mode you would think with the cloud they would have fixed that.... I guess they don't care about partially blind people. I'll have to write a custom grease monkey script that fixes the select text in search... ... View more

    Found my own post 😛 use the following query to bind UserName to email like so ... | join UserName [search event_simpleName IN ("UserLogon*", "Login*") UserPrincipal!="svcSCOM.SvcNow@newellco.com" UserPrincipal=*.*@*.com UserPrincipal!=*.$*.com UserName!=svcSCCM.ClientPush UserName!=SYSTEM earliest=-2d@d]   Reference :  https://github.com/freeload101/SCRIPTS/tree/master/CrowdStrike%20Threat%20Hunting ... View more