[
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AlertInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "EmailEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceNetworkInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceProcessEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceNetworkEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceFileEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceRegistryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceLogonEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceImageLoadEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceFileCertificateInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmSoftwareVulnerabilities"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmSoftwareVulnerabilitiesKB"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmSecureConfigurationAssessment"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmSecureConfigurationAssessmentKB"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceBaselineComplianceAssessment"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceBaselineComplianceAssessmentKB"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceBaselineComplianceProfiles"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmSoftwareInventory"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmCertificateInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmInfoGathering"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmInfoGatheringKB"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmSoftwareEvidenceBeta"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmBrowserExtensions"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmBrowserExtensionsKB"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DeviceTvmHardwareFirmware"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "CloudAuditEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ExposureGraphNodes"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ExposureGraphEdges"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AADManagedIdentitySignInLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AADNonInteractiveUserSignInLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AADUserRiskEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimAuditEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimAuthenticationEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimDhcpEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimDnsActivityLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimFileEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimNetworkSessionLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimProcessEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimRegistryEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimUserManagementActivityLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ASimWebSessionLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AWSCloudTrail"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AWSCloudWatch"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AWSGuardDuty"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AWSWAF"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "Alert"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "Anomalies"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AppCenterError"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "AzureActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "BehaviorAnalytics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "CommonSecurityLog"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ComputerGroup"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ConfidentialWatchlist"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DataverseActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DnsAuditEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DnsEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DnsInventory"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "DynamicSummary"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "Dynamics365Activity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "GCPAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "GoogleCloudSCC"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "HuntingBookmark"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "LinuxAuditLog"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "McasShadowItReporting"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "MicrosoftGraphActivityLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "MicrosoftPurviewInformationProtection"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "NetworkSessions"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "Operation"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "PowerAppsActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "PowerAutomateActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "PowerBIActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "PowerPlatformAdminActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "PowerPlatformConnectorActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "PowerPlatformDlpActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ProjectActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "SecurityEvent"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "SecurityIncident"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "SentinelAudit"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "SentinelHealth"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "SigninLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ThreatIntelIndicators"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ThreatIntelObjects"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "ThreatIntelligenceIndicator"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "Usage"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "UserAccessAnalytics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "UserPeerAnalytics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "Watchlist"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-18",
    "Table": "WindowsEvent"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-19",
    "Table": "AZKVAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-19",
    "Table": "AZKVPolicyEvaluationDetailsLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-19",
    "Table": "AzureDiagnostics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2024-10-19",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Column SentinelWorkspaceIds added",
    "Date": "2026-01-02",
    "Table": "AlertInfo"
  },
  {
    "Action": "Column SentinelWorkspaceIds added",
    "Date": "2026-01-02",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Column Timestamp added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column ReportId added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column IdentityId added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column OnPremObjectId added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column CriticalityLevel added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column DistinguishedName added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column Address added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column Manager added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column Phone added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column CreatedDateTime added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column SourceProvider added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column ChangeSource added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column BlastRadius added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column CompanyName added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column DeletedDateTime added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column EmployeeId added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column OtherMailAddresses added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column RiskLevel added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column RiskLevelDetails added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column State added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column Tags added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column UserAccountControl added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column SourceProviders added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column IdentityEnvironment added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column PrivilegedEntraPimRoles added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column AssignedRoles added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column GroupMembership added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column RiskStatus added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column TenantMembershipType added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column TimeGenerated added",
    "Date": "2026-01-02",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "IdentityAccountInfo"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column UncommonForUser added",
    "Date": "2026-01-02",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column LastSeenForUser added",
    "Date": "2026-01-02",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "IdentityEvents"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column SessionData added",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column AuditSource added",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column OAuthAppId added",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column UncommonForUser added",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column LastSeenForUser added",
    "Date": "2026-01-02",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column ExchangeTransportRule added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column DistributionList added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column ForwardingInformation added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column Context added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column To added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column Cc added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column ThreatClassification added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column RecipientDomain added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column EmailSize added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column IsFirstContact added",
    "Date": "2026-01-02",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column FileExtension added",
    "Date": "2026-01-02",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column UrlChainId added",
    "Date": "2026-01-02",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column UrlChainPosition added",
    "Date": "2026-01-02",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column SenderFromAddress added",
    "Date": "2026-01-02",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column EmailDirection added",
    "Date": "2026-01-02",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "MessageEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "MessageUrlInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "MessagePostDeliveryEvents"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-01-02",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-01-02",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column AppName added",
    "Date": "2026-01-02",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column AppVersion added",
    "Date": "2026-01-02",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column SourceId added",
    "Date": "2026-01-02",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "FileMaliciousContentInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CampaignInfo"
  },
  {
    "Action": "Column IsTransient added",
    "Date": "2026-01-02",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column OsBuildRevision added",
    "Date": "2026-01-02",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column DiscoverySources added",
    "Date": "2026-01-02",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column FirmwareVersions added",
    "Date": "2026-01-02",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Action type added: ExternalDeviceConnected",
    "Date": "2026-01-02",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Action type added: ExternalDeviceDisconnected",
    "Date": "2026-01-02",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column AadDeviceId added",
    "Date": "2026-01-02",
    "Table": "DeviceTvmSoftwareVulnerabilities"
  },
  {
    "Action": "Column EpssScore added",
    "Date": "2026-01-02",
    "Table": "DeviceTvmSoftwareVulnerabilitiesKB"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CloudProcessEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CloudStorageAggregatedEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-01-02",
    "Table": "ExposureGraphNodes"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-01-02",
    "Table": "ExposureGraphEdges"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ConnectorStatusInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AADSpnSignInEventsBeta"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AADSignInEventsBeta"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GraphAPIAuditEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ABAPAuditLog"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ABAPAuthorizationDetails"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ABAPChangeDocsLog"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ABAPTableDataLog"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ABAPUserDetails"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSALBAccessLogs"
  },
  {
    "Action": "Column UserIdentityUserId added",
    "Date": "2026-01-02",
    "Table": "AWSCloudTrail"
  },
  {
    "Action": "Column UserIdentityStoreArn added",
    "Date": "2026-01-02",
    "Table": "AWSCloudTrail"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSELBFlowLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSNLBAccessLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSNetworkFirewallAlert"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSNetworkFirewallFlow"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSNetworkFirewallTls"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSRoute53Resolver"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSS3ServerAccess"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AWSSecurityHubFindings"
  },
  {
    "Action": "Column Start added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsClusterArn added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsClusterName added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsContainerInstanceArn added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsContainerInstanceId added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsContainerId added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsSecondContainerId added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsServiceName added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsTaskDefinitionArn added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsTaskArn added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Column EcsTaskId added",
    "Date": "2026-01-02",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "AggregatedSecurityAlert"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CommunicationComplianceActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CrowdStrikeAlerts"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CrowdStrikeHosts"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CrowdStrikeIncidents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "CrowdStrikeVulnerabilities"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPApigee"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPCDN"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPCloudRun"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPCloudSQL"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPComputeEngine"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPDNS"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPFirewallLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPIAM"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPIDS"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPLoadBalancer"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPMonitoring"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPNAT"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPNATAudit"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPResourceManager"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GCPVPCFlow"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GKEAPIServer"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GKEApplication"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GKEAudit"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GKEControllerManager"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GKEHPADecision"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GKEScheduler"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "GoogleWorkspaceReports"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "IlumioInsights"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "LLMActivity"
  },
  {
    "Action": "Column SensitivityLabelEventFailureData added",
    "Date": "2026-01-02",
    "Table": "MicrosoftPurviewInformationProtection"
  },
  {
    "Action": "Column AutoSensitivityLabelPolicyInfo added",
    "Date": "2026-01-02",
    "Table": "MicrosoftPurviewInformationProtection"
  },
  {
    "Action": "Column UniqueTokenId removed",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column IssuedAtTime removed",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column AppAccessContext added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column Attendees added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column ArtifactsShared added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column IsJoinedFromLobby added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column JoinTime added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column LeaveTime added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column DeviceInformation added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column MeetingDetailId added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column ListItemUniqueId added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column SensitivityLabelId added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Column UniqueSharingId added",
    "Date": "2026-01-02",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "OktaSystemLogs"
  },
  {
    "Action": "Column FolderAccessRequests added",
    "Date": "2026-01-02",
    "Table": "PowerBIActivity"
  },
  {
    "Action": "Column Properties added",
    "Date": "2026-01-02",
    "Table": "PowerPlatformAdminActivity"
  },
  {
    "Action": "Column EnvironmentId added",
    "Date": "2026-01-02",
    "Table": "PowerPlatformAdminActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "SentinelBehaviorEntities"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "SentinelBehaviorInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-02",
    "Table": "ThreatIntelExportOperation"
  },
  {
    "Action": "Column Source removed",
    "Date": "2026-01-02",
    "Table": "ThreatIntelIndicators"
  },
  {
    "Action": "Column Source removed",
    "Date": "2026-01-02",
    "Table": "ThreatIntelObjects"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceBaselineComplianceAssessment"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceBaselineComplianceAssessmentKB"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceBaselineComplianceProfiles"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceTvmCertificateInfo"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceTvmBrowserExtensions"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceTvmBrowserExtensionsKB"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "DeviceTvmHardwareFirmware"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AADManagedIdentitySignInLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AADNonInteractiveUserSignInLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AADUserRiskEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AZKVAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AZKVPolicyEvaluationDetailsLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AzureDiagnostics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "MicrosoftGraphActivityLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-02",
    "Table": "SigninLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppEnvSessionConsoleLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppEnvSessionLifecycleLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppEnvSessionPoolEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppEnvSpringAppConsoleLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceAntivirusScanAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceAppLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceAuthenticationLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceConsoleLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceFileAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceHTTPLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceIPSecAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServicePlatformLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AppServiceServerlessSecurityPluginData"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AzureDiagnostics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "AzureMetricsV2"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "ContainerAppConsoleLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "ContainerAppSystemLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "ContainerRegistryLoginEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "ContainerRegistryRepositoryEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "Event"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "FunctionAppLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "Heartbeat"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "LAJobLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "LAQueryLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "LASummaryLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "LogicAppWorkflowRuntime"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "OTelEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "OTelLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "OTelResources"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "OTelSpans"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "OTelTraces"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "OTelTracesAgent"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "StorageBlobLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "StorageFileLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "StorageQueueLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "StorageTableLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-03",
    "Table": "Syslog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppEnvSessionConsoleLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppEnvSessionLifecycleLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppEnvSessionPoolEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppEnvSpringAppConsoleLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceAntivirusScanAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceAppLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceAuthenticationLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceConsoleLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceFileAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceHTTPLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceIPSecAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServicePlatformLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AppServiceServerlessSecurityPluginData"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AzureDiagnostics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "AzureMetricsV2"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "ContainerAppConsoleLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "ContainerAppSystemLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "Event"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "FunctionAppLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "Heartbeat"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "LAJobLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "LAQueryLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "LASummaryLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "LogicAppWorkflowRuntime"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "OTelEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "OTelLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "OTelResources"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "OTelSpans"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "OTelTraces"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "OTelTracesAgent"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "StorageBlobLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "StorageFileLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "StorageQueueLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "StorageTableLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-04",
    "Table": "Syslog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-05",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-05",
    "Table": "ContainerRegistryLoginEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-05",
    "Table": "ContainerRegistryRepositoryEvents"
  },
  {
    "Action": "Action type added: UserAccountPasswordResetAttempt",
    "Date": "2026-01-12",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column ResponseSize added",
    "Date": "2026-01-12",
    "Table": "GraphAPIAuditEvents"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-24",
    "Table": "ASimAlertEventLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-24",
    "Table": "CopilotActivity"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-01-24",
    "Table": "QualysKnowledgeBase"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-01-24",
    "Table": "LLMActivity"
  },
  {
    "Action": "Action type added: GroupPolicyHardeningPolicyApplied",
    "Date": "2026-01-26",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: GroupPolicyHardeningPolicyRemoved",
    "Date": "2026-01-26",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: SafeBootGuardPolicyApplied",
    "Date": "2026-01-26",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: SafeBootGuardPolicyRemoved",
    "Date": "2026-01-26",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type removed: GroupPolicyHardeningPolicyApplied",
    "Date": "2026-01-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type removed: GroupPolicyHardeningPolicyRemoved",
    "Date": "2026-01-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type removed: SafeBootGuardPolicyApplied",
    "Date": "2026-01-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type removed: SafeBootGuardPolicyRemoved",
    "Date": "2026-01-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: GroupPolicyHardeningPolicyApplied",
    "Date": "2026-02-01",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: GroupPolicyHardeningPolicyRemoved",
    "Date": "2026-02-01",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: SafeBootGuardPolicyApplied",
    "Date": "2026-02-01",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Action type added: SafeBootGuardPolicyRemoved",
    "Date": "2026-02-01",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column JsonPayloadMessage added",
    "Date": "2026-02-01",
    "Table": "GCPCloudRun"
  },
  {
    "Action": "Column JsonPayloadRequest added",
    "Date": "2026-02-01",
    "Table": "GCPCloudRun"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-02",
    "Table": "SecurityAlert"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeCases"
  },
  {
    "Action": "Column Description added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column EndTime added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Entities added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column EntityValues added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Id added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column MitreAttack added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Name added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column References added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceEventModel added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Tactics added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column TacticIds added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Techniques added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column TechniqueIds added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column XdrDetectionId added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column AddedPrivileges added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column AggregateId added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Objective added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column PolyId added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column PreviousPrivileges added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Privileges added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Scenario added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Severity added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SeverityName added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceAccountDomain added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceAccountName added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceAccountObjectGuid added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceAccountObjectSid added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceAccountSamAccountName added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column SourceAccountUpn added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Tactic added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column Technique added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column TacticId added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Column TechniqueId added",
    "Date": "2026-02-05",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-08",
    "Table": "AZKVAuditLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-08",
    "Table": "AZKVPolicyEvaluationDetailsLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-08",
    "Table": "AzureDiagnostics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-08",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Column UniqueTokenId added",
    "Date": "2026-02-10",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Column IsSignInThroughGlobalSecureAccess added",
    "Date": "2026-02-10",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Column UniqueTokenId added",
    "Date": "2026-02-10",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Column MachineGroup added",
    "Date": "2026-02-10",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column MachineGroup added",
    "Date": "2026-02-10",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-10",
    "Table": "AZKVAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-10",
    "Table": "AZKVPolicyEvaluationDetailsLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-10",
    "Table": "AzureDiagnostics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-10",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-11",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-11",
    "Table": "StorageBlobLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-11",
    "Table": "StorageFileLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-11",
    "Table": "StorageQueueLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-11",
    "Table": "StorageTableLogs"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-02-15",
    "Table": "AWSEKSLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-15",
    "Table": "AzureMetrics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-15",
    "Table": "StorageBlobLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-15",
    "Table": "StorageFileLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-15",
    "Table": "StorageQueueLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-15",
    "Table": "StorageTableLogs"
  },
  {
    "Action": "Column Title added",
    "Date": "2026-02-18",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _IsBillable added",
    "Date": "2026-02-18",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _BilledSize added",
    "Date": "2026-02-18",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _ResourceId added",
    "Date": "2026-02-18",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _SubscriptionId added",
    "Date": "2026-02-18",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column CloudResource added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudPlatform added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudResourceType added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudResourceId added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudSubscriptionId added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _IsBillable added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _BilledSize added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _ResourceId added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _SubscriptionId added",
    "Date": "2026-02-18",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "AlertInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "AlertInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "AlertInfo"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "AlertInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "AlertInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "AlertEvidence"
  },
  {
    "Action": "Column RiskStatus removed",
    "Date": "2026-02-27",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column TenantMembershipType removed",
    "Date": "2026-02-27",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "IdentityAccountInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "IdentityAccountInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "IdentityAccountInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "IdentityLogonEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "IdentityQueryEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "IdentityDirectoryEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "IdentityEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "IdentityEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "IdentityEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "IdentityEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "CloudAppEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "EmailUrlInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "MessageEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "MessageEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "MessageEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "MessageEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "MessageUrlInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "MessageUrlInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "MessageUrlInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "MessageUrlInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "MessagePostDeliveryEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "MessagePostDeliveryEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "MessagePostDeliveryEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "MessagePostDeliveryEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "UrlClickEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "FileMaliciousContentInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "FileMaliciousContentInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "FileMaliciousContentInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "FileMaliciousContentInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "CampaignInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "CampaignInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "CampaignInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "CampaignInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkInfo"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceProcessEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceProcessEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceProcessEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceProcessEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceProcessEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceNetworkEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceRegistryEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceRegistryEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceRegistryEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceRegistryEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceRegistryEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceLogonEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceLogonEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceLogonEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceLogonEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceLogonEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceImageLoadEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceImageLoadEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceImageLoadEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceImageLoadEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceImageLoadEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileCertificateInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileCertificateInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileCertificateInfo"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileCertificateInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceFileCertificateInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DisruptionAndResponseEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilities"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilities"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilities"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilities"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilitiesKB"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilitiesKB"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareVulnerabilitiesKB"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessment"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessment"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessment"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessment"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessment"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessmentKB"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessmentKB"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSecureConfigurationAssessmentKB"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareInventory"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareInventory"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareInventory"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareInventory"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGathering"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGathering"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGathering"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGathering"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGatheringKB"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGatheringKB"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmInfoGatheringKB"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareEvidenceBeta"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareEvidenceBeta"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareEvidenceBeta"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "DeviceTvmSoftwareEvidenceBeta"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "CloudAuditEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "CloudAuditEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "CloudAuditEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "CloudAuditEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "CloudProcessEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "CloudProcessEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "CloudProcessEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "CloudProcessEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "CloudStorageAggregatedEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "CloudStorageAggregatedEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "CloudStorageAggregatedEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "CloudStorageAggregatedEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "ExposureGraphNodes"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "ExposureGraphNodes"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "ExposureGraphNodes"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "ExposureGraphEdges"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "ExposureGraphEdges"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "ExposureGraphEdges"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "ConnectorStatusInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "ConnectorStatusInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "AADSpnSignInEventsBeta"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "AADSpnSignInEventsBeta"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "AADSpnSignInEventsBeta"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "AADSpnSignInEventsBeta"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "AADSignInEventsBeta"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "AADSignInEventsBeta"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "AADSignInEventsBeta"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "AADSignInEventsBeta"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSignInEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "GraphAPIAuditEvents"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "GraphAPIAuditEvents"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "GraphAPIAuditEvents"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "GraphAPIAuditEvents"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column Title removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _ResourceId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column _SubscriptionId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorInfo"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column MachineGroup removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudResource removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudPlatform removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudResourceType removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudResourceId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column CloudSubscriptionId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _IsBillable removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _BilledSize removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _ResourceId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column _SubscriptionId removed",
    "Date": "2026-02-27",
    "Table": "BehaviorEntities"
  },
  {
    "Action": "Column TenantId removed",
    "Date": "2026-02-27",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Column Type removed",
    "Date": "2026-02-27",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Column SourceSystem removed",
    "Date": "2026-02-27",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Column TimeGenerated removed",
    "Date": "2026-02-27",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ABAPAuditLog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ABAPAuthorizationDetails"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ABAPChangeDocsLog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ABAPTableDataLog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ABAPUserDetails"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimAlertEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimAuditEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimAuthenticationEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimDhcpEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimDnsActivityLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimFileEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimNetworkSessionLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimProcessEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimRegistryEventLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimUserManagementActivityLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ASimWebSessionLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSALBAccessLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSCloudTrail"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSCloudWatch"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSEKSLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSELBFlowLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSGuardDuty"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSNLBAccessLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSNetworkFirewallAlert"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSNetworkFirewallFlow"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSNetworkFirewallTls"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSRoute53Resolver"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSS3ServerAccess"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSSecurityHubFindings"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSVPCFlow"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AWSWAF"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AggregatedSecurityAlert"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "Alert"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "Anomalies"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AppCenterError"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "AzureActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "BehaviorAnalytics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CommonSecurityLog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CommunicationComplianceActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ComputerGroup"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ConfidentialWatchlist"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CopilotActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CrowdStrikeAlerts"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CrowdStrikeCases"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CrowdStrikeDetections"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CrowdStrikeHosts"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CrowdStrikeIncidents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "CrowdStrikeVulnerabilities"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "DataverseActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "DnsAuditEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "DnsEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "DnsInventory"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "DynamicSummary"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "Dynamics365Activity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPApigee"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPAuditLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPCDN"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPCloudRun"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPCloudSQL"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPComputeEngine"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPDNS"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPFirewallLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPIAM"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPIDS"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPLoadBalancer"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPMonitoring"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPNAT"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPNATAudit"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPResourceManager"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GCPVPCFlow"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GKEAPIServer"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GKEApplication"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GKEAudit"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GKEControllerManager"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GKEHPADecision"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GKEScheduler"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GoogleCloudSCC"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "GoogleWorkspaceReports"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "HuntingBookmark"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "IlumioInsights"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "LinuxAuditLog"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "McasShadowItReporting"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "MicrosoftPurviewInformationProtection"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "NetworkSessions"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "OfficeActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "OktaSystemLogs"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "Operation"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "PowerAppsActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "PowerAutomateActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "PowerBIActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "PowerPlatformAdminActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "PowerPlatformConnectorActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "PowerPlatformDlpActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ProjectActivity"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "QualysKnowledgeBase"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SecurityAlert"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SecurityEvent"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SecurityIncident"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SentinelAudit"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SentinelBehaviorEntities"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SentinelBehaviorInfo"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "SentinelHealth"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ThreatIntelExportOperation"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ThreatIntelIndicators"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ThreatIntelObjects"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "ThreatIntelligenceIndicator"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "Usage"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "UserAccessAnalytics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "UserPeerAnalytics"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "Watchlist"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-02-27",
    "Table": "WindowsEvent"
  },
  {
    "Action": "Column IsConfidentialClient added",
    "Date": "2026-03-08",
    "Table": "AADSpnSignInEventsBeta"
  },
  {
    "Action": "Column IsConfidentialClient added",
    "Date": "2026-03-08",
    "Table": "EntraIdSpnSignInEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-03-08",
    "Table": "CloudAuditEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-03-08",
    "Table": "CloudProcessEvents"
  },
  {
    "Action": "Table removed from tracking",
    "Date": "2026-03-08",
    "Table": "CloudStorageAggregatedEvents"
  },
  {
    "Action": "Column DlpInfo added",
    "Date": "2026-03-11",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column RegistrySource added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column Instructions added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column EntraObjectId added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column EntraBlueprintId added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column IsBlocked added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column Version added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column AIModel added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column AccessCapabilities added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column ElementTypes added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Column SourceAgentId added",
    "Date": "2026-03-23",
    "Table": "AIAgentsInfo"
  },
  {
    "Action": "Action type added: CertificateServicesApprovedCertificateRequest",
    "Date": "2026-03-23",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Action type added: CertificateServicesLoadedTemplate",
    "Date": "2026-03-23",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Action type added: CertificateServicesReceivedCertificateRequest",
    "Date": "2026-03-23",
    "Table": "DeviceEvents"
  },
  {
    "Action": "Column RiskScore added",
    "Date": "2026-04-01",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column RiskScoreUpdateTime added",
    "Date": "2026-04-01",
    "Table": "IdentityInfo"
  },
  {
    "Action": "Column RestrictedDeviceSecurityOperations added",
    "Date": "2026-05-03",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Column SourceLocation added",
    "Date": "2026-05-22",
    "Table": "EmailPostDeliveryEvents"
  },
  {
    "Action": "Column RiskScore added",
    "Date": "2026-05-28",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Column AssignedRoles added",
    "Date": "2026-07-04",
    "Table": "OAuthAppInfo"
  },
  {
    "Action": "Column OriginalThreatTypes added",
    "Date": "2026-08-19",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column OriginalDetectionMethods added",
    "Date": "2026-08-19",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column OriginalConfidenceLevel added",
    "Date": "2026-08-19",
    "Table": "EmailEvents"
  },
  {
    "Action": "Column AdditionalFields added",
    "Date": "2026-08-19",
    "Table": "EmailAttachmentInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-08-19",
    "Table": "CallActivityEvents"
  },
  {
    "Action": "Column DeviceRoles added",
    "Date": "2026-08-19",
    "Table": "DeviceInfo"
  },
  {
    "Action": "Table added to tracking",
    "Date": "2026-08-19",
    "Table": "AgentsInfo"
  }
]