{
  "version": "Notebook/1.0",
  "items": [
    {
      "type": 1,
      "content": {
        "json": "## Top computers by infections\n---\n\nTop 3 computers by amount of infections. "
      },
      "name": "text - 2"
    },
    {
      "type": 3,
      "content": {
        "version": "KqlItem/1.0",
        "query": "WsSecurityEvents_CL \n| summarize Events = count() by Result = strcat('Host: ', SourceHostName)\n| take 3",
        "size": 1,
        "queryType": 0,
        "resourceType": "microsoft.operationalinsights/workspaces",
        "visualization": "unstackedbar"
      },
      "name": "query - 2"
    }
  ],
  "fromTemplateId": "sentinel-WithSecureTopComputersByInfection",
  "$schema": "https://github.com/Microsoft/Application-Insights-Workbooks/blob/master/schema/workbook.json"
}