Update Kusto Graph Explorer Queries.md

Author: awsles

AZURE/Kusto Graph Explorer Queries.md

@@ -80,7 +80,7 @@ Resources
 
 
 
-### Find by IP address
+### Find Resource by IP address
 ```
 Resources
 | where type =~ "microsoft.network/networkinterfaces" and isnotempty(properties.ipConfigurations)
@@ -94,6 +94,14 @@ Resources
     | project publicIPid=id, publicIPaddr) on publicIPid
 ```
 
+### Find VM given its network interface ID
+$KustoFindVMbyInterfaceID = 'Resources
+| where type =~ "microsoft.compute/virtualmachines" 
+| extend networkProfile = tostring(properties.networkProfile)
+| extend computerName = properties.osProfile.computerName
+| mv-expand networkInterfaces = properties.networkProfile.networkInterfaces
+| where networkInterfaces.id =~ "%%ID%%"'
+
 
 
 ### List Azure Bastion Hosts with IP Addresses