June 15, 2022 marks the end for Internet Explorer 11 for supported desktop Windows operating systems. To get a better understanding of how frequently Internet Explorer 11 is still used in your environment, the report below provides an overview of all the events scanned where the Internet Explorer process was created. Additionally, there is a chart report at the bottom of the page as well to help with manageability and for use in dashboards.
To use these reports, you will need to follow the configuration steps in the Pro tips #21 blog post.
Internet Explorer 11 Usage Query
To use this in a chart widget, prefix the report name with “Chart:” and select it in the chart report widget found on a dashboard.
The chart below provides an overview of the number of times Internet Explorer was started in the last 14 days.
Select Distinct Top 1000000 tblAssets.AssetName,
Count(tblNtlog.TimeGenerated) As Instances
From tblAssets
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Where tblNtlog.TimeGenerated > GetDate() - 30 And tblNtlog.Eventcode = 4688 And
tblNtlogMessage.Message Like '%New Process Name:_C:Program Files (x86)Internet Exploreriexplore.exe%'
Group By tblAssets.AssetName
