EmailEvents Schema are not available in Advanced Hunting

Question

Hello,

I use Advanced Hunting a lot for e-mail investigtion. On my new client, I can see that EmailEvents Schema is not available. Can you help me if there something that should be enabled or something that has changed on Microsoft side ?

Thank you,
Adrian

Answer 1

Hello @Adrian Patachia - Sultanoiu
Thanks for your posting on Q&A.

According to my research, the Advanced Hunting belongs to Microsoft Defender for Endpoint/Microsoft 365. It seems that you post the case into the incorrect forum. Please follow the below link to get support.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/contact-support?view=o365-worldwide

Also, we could also get the support on this community.

Hope the above will be helpful. Please feel free to keep us in touch if you have any questions.

Have a great day.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.