where does the alert data for defender for SQL populate in sentinel

Question

I am referring to this product. Will an entry be made in the SecurityAlert table in the KQL logs? If so what would be the provider?

https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-introduction

Answer 1

All of the alerts forwarded to Sentinel from Defender for Cloud (Azure Security Center) can be found in the Security Alert table under the Azure Security Center provider name.

SecurityAlert
| where ProviderName == "Azure Security Center"
| summarize count() by AlertType