PCI Requirement 2 - Proof MFA in use

I am going through a PCI audit and was requested that I prove that MFA was in use.  I used this Azure KQL against my log analytics workspace to show all sign ins and if MFA was checked.