Skip to content

X XDR ReferenceSchema and PowerShell tools

Schema Changes Relationships XDRInternals

Search the reference /

REFERENCE

Devices

Devices

DeviceEvents
DeviceFileCertificateInfo
DeviceFileEvents
DeviceImageLoadEvents
DeviceInfo
DeviceLogonEvents
DeviceNetworkEvents
DeviceNetworkInfo
DeviceProcessEvents
DeviceRegistryEvents
DisruptionAndResponseEvents

Schema data last collected 7 Oct 2026, 06:35 UTC.

XDRInternals version 0.0.1 · View source at 20895ab · Docs updated 29 Sep 2026.

XDR ReferenceA community-built guide to Defender XDR data and tools.

Full schema JSON Action type data Schema changes JSON

XDRInternals on GitHub Cloudbrothers.info AnalyticsRules.exchange Imprint