Skip to content

Fix disabled account hunting queries - #14826

Open
juanjosalco wants to merge 3 commits into
Azure:masterfrom
juanjosalco:users/juansala/fix-disabled-account-queries
Open

Fix disabled account hunting queries#14826
juanjosalco wants to merge 3 commits into
Azure:masterfrom
juanjosalco:users/juansala/fix-disabled-account-queries

Conversation

@juanjosalco

@juanjosalco juanjosalco commented Aug 4, 2026

Copy link
Copy Markdown

Change(s)

  • Removed exact ResultDescription filters from three disabled-account hunting queries.
  • Retained ResultType == 50057.
  • Updated each query’s patch version.

Reason for Change(s)

  • ResultDescription can vary by locale, causing queries to miss disabled-account sign-ins when the description is not in English.
  • Result code 50057 identifies these failures without relying on localized text.

Version Updated

  • DisabledAccountSigninAttempts.yaml: 2.0.32.0.4
  • DisabledAccountSigninAttemptsByIP.yaml: 1.0.21.0.3
  • disabled_account_squid_usage.yaml: 1.0.11.0.2

Testing Completed

  • Confirmed all queries retain the ResultType 50057 filter.
  • Confirmed all ResultDescription filters were removed.
  • Confirmed no other query logic changed.

Validations

  • Yes. The current GitHub validation check is passing.

Remove locale-dependent ResultDescription filters while retaining ResultType 50057 matching.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@juanjosalco
juanjosalco requested review from a team as code owners August 4, 2026 18:10
@v-atulyadav v-atulyadav self-assigned this Aug 5, 2026
@v-atulyadav v-atulyadav added Solution Solution specialty review needed Hunting Hunting specialty review needed labels Aug 5, 2026
@v-atulyadav

Copy link
Copy Markdown
Collaborator

Hi @juanjosalco,
Please repackage the solution. Thanks

Juan Salazar and others added 2 commits August 4, 2026 23:54
Generate solution package 3.0.4 with the updated disabled-account hunting queries and release notes.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Hunting Hunting specialty review needed Solution Solution specialty review needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants