Microsoft 365 Security - Advanced Hunting

Pramod 1 Reputation point
2020-11-22T13:33:24.257+00:00

Can someone help me, on why I am not able to see DeviceEvents or Device related tables in the schema reference under Advanced Hunting?

For this reason, I am not able to use any query related to Device Tables.

Thanks

Pramod41624-adv-hunting-missingdevicetables.png

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,931 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Molly Lu 846 Reputation points Microsoft Vendor
    2020-11-23T09:26:19.93+00:00

    Hi Pramod,

    You can refer to the link below to check if you can fix this issue:
    https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference
    https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-deviceevents-table

    Best regards,
    Molly

    --------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.