← Browse all tablesLoading table information…
SecurityRecommendation Schema
Table description
| TableSection |
TableType |
TableSectionName |
Description |
|
|
Other hunting tables |
|
Schema
| Name |
Description |
Type |
| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| AssessedResourceId |
|
String |
| Description |
Description of the information gathered |
String |
| DeviceId |
Unique identifier for the device in Microsoft Defender for Endpoint |
String |
| DiscoveredTimeUTC |
|
DateTime |
| Environment |
|
String |
| FirstEvaluationDate |
|
DateTime |
| IsSnapshot |
|
Boolean |
| PolicyDefinitionId |
|
String |
| Properties |
|
Object |
| ProviderName |
|
String |
| RecommendationAdditionalData |
|
Object |
| RecommendationDisplayName |
|
String |
| RecommendationId |
|
String |
| RecommendationName |
|
String |
| RecommendationSeverity |
|
String |
| RecommendationState |
|
String |
| ResolvedTimeUTC |
|
DateTime |
| ResourceRegion |
|
String |
| StatusChangeDate |
|
DateTime |
| TimeGenerated |
|
DateTime |
| Type |
The name of the table |
String |
Schema changes
| Date |
Action |
| 2026-10-07 |
Table added to tracking |