# join

```
let IntuneData = IntuneDevices
| where OS == 'Windows' and UserName has "Sandy"
| summarize arg_max(TimeGenerated, *) by SerialNumber
| distinct ReferenceId, UPN;
UCClient
| where TimeGenerated > ago (3d)
| join kind=innerunique   IntuneData on $left.AzureADDeviceId == $right.ReferenceId
| project TimeGenerated, DeviceName, OSEdition, OSVersion, OSServicingChannel, UPN
```

<figure><img src="https://3533425259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fbx8yn20QqNJtsVaH9CY7%2Fuploads%2FgErKBBfEZlzLPkhJk9ZK%2Fimage.png?alt=media&#x26;token=292213bf-b7eb-4c06-8f54-e57b140fea8a" alt=""><figcaption></figcaption></figure>
