Ruby then decides she wants to make a query in Azure Monitor for others to use.

SecurityEvent

$|$ where TimeGenerated between $($ago$(14$d$)..$ago$(7$d$))$

$|$ where EventID $=="4624"$

$|$ where Computer startswith "MarySue"

Ruby wants to add the user name as well. What additional line must she add?

Select one:

NOT $$Mary Sue$$

source $==$ MarySue and

and where UserName $==$ 'Mary Sue'

where user $=$ Mary