Audit recently added nodes to detect unauthorized device additions
SELECT NodeName, IPAddress, Vendor, OperatingSystem,
DateTime('AddedDate') AS DateAdded
FROM Orion.Nodes
WHERE AddedDate >= ADDDATE('day', -7, GETDATE())
ORDER BY AddedDate DESCAI-powered SWQL generation, script management, CVE tracking, and verified solution intelligence.