// Author: Ian D. Hanley (DevSecOpsDad) | linkedin.com/in/ianhanley | devsecopsdad.com | devsecopsdadattack.com
// Identify the top 10 blocked domains
PiHole
| where QueryType == "Blocked"  // Filter for blocked queries
| summarize Count = count() by Domain  // Aggregate counts by domain
| top 10 by Count  // Select the top 10 domains by count