What should you include in the query?

You plan to create a custom Azure Sentinel query that will track anomalous Azure Active Directory (Azure AD) sign-in activity and present the activity as a time chart aggregated by day.

You need to create a query that will be used to display the time chart.

What should you include in the query?
A . extend
B . bin
C . makeset
D . workspace

Answer: B

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/logs/get-started-queries