Loading table information…

Update Schema

Table description

TableSection	TableType	TableSectionName	Description
		Other hunting tables	Details for update schedule run. Includes information such as which updates where available and which were installed.

Name	Description	Type
_BilledSize		Double
_IsBillable		String
_ResourceId	A unique identifier for the resource that the record is associated with	String
_SubscriptionId	A unique identifier for the subscription that the record is associated with	String
ApprovalSource		String
Approved		Boolean
BulletinID		String
BulletinUrl		String
Classification		String
Computer		String
ComputerEnvironment		String
CVENumbers		String
InstallTimeAvailable		Boolean
InstallTimeDeviationRangeSeconds		Double
InstallTimePredictionSeconds		Double
KBID		String
ManagementGroupName		String
MSRCBulletinID		String
MSRCSeverity		String
Optional		Boolean
OSFullName		String
OSName		String
OSType		String
OSVersion	Version of the operating system running on the machine	String
PackageRepository		String
PackageSeverity		String
Product		String
ProductArch		String
ProductVersion		String
PublishedDate	Date vulnerability was disclosed to the public	DateTime
RebootBehavior		String
Resource		String
ResourceGroup		String
ResourceId	Unique identifier of the resource accessed	String
ResourceProvider		String
ResourceType	Type of cloud resource	String
RevisionNumber		String
SourceComputerId	The source computer ID of the activity	String
SourceSystem		String
SubscriptionId	Unique identifier of the cloud service subscription	String
TimeGenerated		DateTime
Title	Title of the alert	String
Type	The name of the table	String
UpdateID		String
UpdateState		String
VMUUID		String

Date	Action
2026-10-07	Table added to tracking

TableSection	TableType	TableSectionName	Description
		Other hunting tables	Details for update schedule run. Includes information such as which updates where available and which were installed.

Name	Description	Type
_BilledSize		Double
_IsBillable		String
_ResourceId	A unique identifier for the resource that the record is associated with	String
_SubscriptionId	A unique identifier for the subscription that the record is associated with	String
ApprovalSource		String
Approved		Boolean
BulletinID		String
BulletinUrl		String
Classification		String
Computer		String
ComputerEnvironment		String
CVENumbers		String
InstallTimeAvailable		Boolean
InstallTimeDeviationRangeSeconds		Double
InstallTimePredictionSeconds		Double
KBID		String
ManagementGroupName		String
MSRCBulletinID		String
MSRCSeverity		String
Optional		Boolean
OSFullName		String
OSName		String
OSType		String
OSVersion	Version of the operating system running on the machine	String
PackageRepository		String
PackageSeverity		String
Product		String
ProductArch		String
ProductVersion		String
PublishedDate	Date vulnerability was disclosed to the public	DateTime
RebootBehavior		String
Resource		String
ResourceGroup		String
ResourceId	Unique identifier of the resource accessed	String
ResourceProvider		String
ResourceType	Type of cloud resource	String
RevisionNumber		String
SourceComputerId	The source computer ID of the activity	String
SourceSystem		String
SubscriptionId	Unique identifier of the cloud service subscription	String
TimeGenerated		DateTime
Title	Title of the alert	String
Type	The name of the table	String
UpdateID		String
UpdateState		String
VMUUID		String

Date	Action
2026-10-07	Table added to tracking