Skip to content

X XDR ReferenceSchema and PowerShell tools

Schema Changes Relationships XDRInternals

Search the reference /

REFERENCE

Apps & identities

Apps & identities

AADSignInEventsBeta
AADSpnSignInEventsBeta
AIAgentsInfo
CloudAppEvents
EntraIdSignInEvents
EntraIdSpnSignInEvents
GraphAPIAuditEvents
IdentityAccountInfo
IdentityDirectoryEvents
IdentityEvents
IdentityInfo
IdentityLogonEvents
IdentityQueryEvents
OAuthAppInfo

Schema data last collected 7 Oct 2026, 06:35 UTC.

XDRInternals version 0.0.1 · View source at 20895ab · Docs updated 29 Sep 2026.

XDR ReferenceA community-built guide to Defender XDR data and tools.

Full schema JSON Action type data Schema changes JSON

XDRInternals on GitHub Cloudbrothers.info AnalyticsRules.exchange Imprint