Skip to content

X XDR ReferenceSchema and PowerShell module

Schema Changes Relationships XDRInternals KQL Validator MCP Sources & credits

Search the reference /

REFERENCE

Docs

All schema changes
LogManagement
Microsoft Sentinel
Microsoft XDR
Other hunting tables

Schema data last collected 13 Nov 2026, 11:47 UTC.

Latest XDRInternals release: 1.0.29 on PowerShell Gallery · View source at de6b04b · Docs updated 2 Nov 2026.

XDR ReferenceA guide to Defender XDR schemas, data and tools made with ❤️ by Fabian Bader

Full schema JSON Action type data Schema changes JSON Structured column examples JSON Column relations JSON

XDRInternals on GitHub Cloudbrothers.info AnalyticsRules.exchange Imprint

Independent community project; not maintained, endorsed, or supported by Microsoft. All information is provided “as is”, without warranty.