Schema changes #
This page documents all changes to the schema.
Table schema changes #
| Date | Table | Action |
|---|---|---|
| 2026-01-04 | Syslog | Table removed from tracking |
| 2026-01-04 | AzureDiagnostics | Table removed from tracking |
| 2026-01-04 | AppServiceServerlessSecurityPluginData | Table removed from tracking |
| 2026-01-04 | AppServicePlatformLogs | Table removed from tracking |
| 2026-01-04 | AppServiceIPSecAuditLogs | Table removed from tracking |
| 2026-01-04 | AppServiceHTTPLogs | Table removed from tracking |
| 2026-01-04 | AppServiceFileAuditLogs | Table removed from tracking |
| 2026-01-04 | AppServiceConsoleLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAuthenticationLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAuditLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAppLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAntivirusScanAuditLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSpringAppConsoleLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSessionPoolEventLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSessionLifecycleLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSessionConsoleLogs | Table removed from tracking |
| 2026-01-04 | AzureMetricsV2 | Table removed from tracking |
| 2026-01-04 | ContainerAppConsoleLogs | Table removed from tracking |
| 2026-01-04 | StorageTableLogs | Table removed from tracking |
| 2026-01-04 | Event | Table removed from tracking |
| 2026-01-04 | ContainerAppSystemLogs | Table removed from tracking |
| 2026-01-04 | StorageQueueLogs | Table removed from tracking |
| 2026-01-04 | StorageFileLogs | Table removed from tracking |
| 2026-01-04 | StorageBlobLogs | Table removed from tracking |
| 2026-01-04 | OTelTraces | Table removed from tracking |
| 2026-01-04 | OTelSpans | Table removed from tracking |
| 2026-01-04 | OTelResources | Table removed from tracking |
| 2026-01-04 | OTelTracesAgent | Table removed from tracking |
| 2026-01-04 | OTelEvents | Table removed from tracking |
| 2026-01-04 | LogicAppWorkflowRuntime | Table removed from tracking |
| 2026-01-04 | LASummaryLogs | Table removed from tracking |
| 2026-01-04 | LAQueryLogs | Table removed from tracking |
| 2026-01-04 | LAJobLogs | Table removed from tracking |
| 2026-01-04 | Heartbeat | Table removed from tracking |
| 2026-01-04 | FunctionAppLogs | Table removed from tracking |
| 2026-01-04 | OTelLogs | Table removed from tracking |
| 2026-01-03 | AppServiceFileAuditLogs | Table added to tracking |
| 2026-01-03 | AzureMetricsV2 | Table added to tracking |
| 2026-01-03 | AzureMetrics | Table added to tracking |
| 2026-01-03 | AzureDiagnostics | Table added to tracking |
| 2026-01-03 | AppServicePlatformLogs | Table added to tracking |
| 2026-01-03 | AppServiceIPSecAuditLogs | Table added to tracking |
| 2026-01-03 | AppServiceHTTPLogs | Table added to tracking |
| 2026-01-03 | AppServiceConsoleLogs | Table added to tracking |
| 2026-01-03 | AppEnvSessionConsoleLogs | Table added to tracking |
| 2026-01-03 | AppServiceAuditLogs | Table added to tracking |
| 2026-01-03 | AppServiceAppLogs | Table added to tracking |
| 2026-01-03 | AppServiceAntivirusScanAuditLogs | Table added to tracking |
| 2026-01-03 | AppEnvSpringAppConsoleLogs | Table added to tracking |
| 2026-01-03 | AppEnvSessionPoolEventLogs | Table added to tracking |
| 2026-01-03 | AppEnvSessionLifecycleLogs | Table added to tracking |
| 2026-01-03 | ContainerAppConsoleLogs | Table added to tracking |
| 2026-01-03 | AppServiceAuthenticationLogs | Table added to tracking |
| 2026-01-03 | ContainerAppSystemLogs | Table added to tracking |
| 2026-01-03 | AppServiceServerlessSecurityPluginData | Table added to tracking |
| 2026-01-03 | ContainerRegistryRepositoryEvents | Table added to tracking |
| 2026-01-03 | ContainerRegistryLoginEvents | Table added to tracking |
| 2026-01-03 | StorageTableLogs | Table added to tracking |
| 2026-01-03 | StorageQueueLogs | Table added to tracking |
| 2026-01-03 | StorageFileLogs | Table added to tracking |
| 2026-01-03 | OTelTracesAgent | Table added to tracking |
| 2026-01-03 | OTelTraces | Table added to tracking |
| 2026-01-03 | OTelSpans | Table added to tracking |
| 2026-01-03 | OTelResources | Table added to tracking |
| 2026-01-03 | OTelLogs | Table added to tracking |
| 2026-01-03 | StorageBlobLogs | Table added to tracking |
| 2026-01-03 | LogicAppWorkflowRuntime | Table added to tracking |
| 2026-01-03 | LASummaryLogs | Table added to tracking |
| 2026-01-03 | LAQueryLogs | Table added to tracking |
| 2026-01-03 | Syslog | Table added to tracking |
| 2026-01-03 | LAJobLogs | Table added to tracking |
| 2026-01-03 | Heartbeat | Table added to tracking |
| 2026-01-03 | FunctionAppLogs | Table added to tracking |
| 2026-01-03 | OTelEvents | Table added to tracking |
| 2026-01-03 | Event | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsSecondContainerId added |
| 2026-01-02 | AWSVPCFlow | Column EcsContainerId added |
| 2026-01-02 | AWSVPCFlow | Column EcsContainerInstanceId added |
| 2026-01-02 | AWSVPCFlow | Column EcsContainerInstanceArn added |
| 2026-01-02 | AWSVPCFlow | Column EcsClusterName added |
| 2026-01-02 | AWSSecurityHubFindings | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column Start added |
| 2026-01-02 | AWSS3ServerAccess | Table added to tracking |
| 2026-01-02 | AWSRoute53Resolver | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsServiceName added |
| 2026-01-02 | AWSVPCFlow | Column EcsClusterArn added |
| 2026-01-02 | AWSVPCFlow | Column EcsTaskDefinitionArn added |
| 2026-01-02 | CrowdStrikeVulnerabilities | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsTaskId added |
| 2026-01-02 | AggregatedSecurityAlert | Table added to tracking |
| 2026-01-02 | CommunicationComplianceActivity | Table added to tracking |
| 2026-01-02 | CrowdStrikeAlerts | Table added to tracking |
| 2026-01-02 | CrowdStrikeDetections | Table added to tracking |
| 2026-01-02 | CrowdStrikeHosts | Table added to tracking |
| 2026-01-02 | CrowdStrikeIncidents | Table added to tracking |
| 2026-01-02 | GCPApigee | Table added to tracking |
| 2026-01-02 | GCPCDN | Table added to tracking |
| 2026-01-02 | GCPCloudRun | Table added to tracking |
| 2026-01-02 | GCPCloudSQL | Table added to tracking |
| 2026-01-02 | AWSNetworkFirewallTls | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsTaskArn added |
| 2026-01-02 | AWSNetworkFirewallFlow | Table added to tracking |
| 2026-01-02 | DeviceEvents | Action type added: ExternalDeviceDisconnected |
| 2026-01-02 | AWSNLBAccessLogs | Table added to tracking |
| 2026-01-02 | DeviceEvents | Action type added: ExternalDeviceConnected |
| 2026-01-02 | GCPComputeEngine | Table added to tracking |
| 2026-01-02 | DisruptionAndResponseEvents | Table added to tracking |
| 2026-01-02 | DeviceTvmSoftwareVulnerabilities | Column AadDeviceId added |
| 2026-01-02 | DeviceTvmSoftwareVulnerabilitiesKB | Column EpssScore added |
| 2026-01-02 | CloudProcessEvents | Table added to tracking |
| 2026-01-02 | CloudStorageAggregatedEvents | Table added to tracking |
| 2026-01-02 | ExposureGraphNodes | Column MachineGroup removed |
| 2026-01-02 | ExposureGraphEdges | Column MachineGroup removed |
| 2026-01-02 | ConnectorStatusInfo | Table added to tracking |
| 2026-01-02 | AADSpnSignInEventsBeta | Table added to tracking |
| 2026-01-02 | AADSignInEventsBeta | Table added to tracking |
| 2026-01-02 | EntraIdSignInEvents | Table added to tracking |
| 2026-01-02 | EntraIdSpnSignInEvents | Table added to tracking |
| 2026-01-02 | GraphAPIAuditEvents | Table added to tracking |
| 2026-01-02 | BehaviorInfo | Table added to tracking |
| 2026-01-02 | BehaviorEntities | Table added to tracking |
| 2026-01-02 | OAuthAppInfo | Table added to tracking |
| 2026-01-02 | ABAPAuditLog | Table added to tracking |
| 2026-01-02 | ABAPAuthorizationDetails | Table added to tracking |
| 2026-01-02 | ABAPChangeDocsLog | Table added to tracking |
| 2026-01-02 | ABAPTableDataLog | Table added to tracking |
| 2026-01-02 | ABAPUserDetails | Table added to tracking |
| 2026-01-02 | AWSALBAccessLogs | Table added to tracking |
| 2026-01-02 | AWSCloudTrail | Column UserIdentityUserId added |
| 2026-01-02 | AWSCloudTrail | Column UserIdentityStoreArn added |
| 2026-01-02 | AWSELBFlowLogs | Table added to tracking |
| 2026-01-02 | AWSNetworkFirewallAlert | Table added to tracking |
| 2026-01-02 | GCPDNS | Table added to tracking |
| 2026-01-02 | OfficeActivity | Column LeaveTime added |
| 2026-01-02 | GCPIAM | Table added to tracking |
| 2026-01-02 | OktaSystemLogs | Table added to tracking |
| 2026-01-02 | PowerBIActivity | Column FolderAccessRequests added |
| 2026-01-02 | PowerPlatformAdminActivity | Column Properties added |
| 2026-01-02 | DeviceInfo | Column FirmwareVersions added |
| 2026-01-02 | SentinelBehaviorEntities | Table added to tracking |
| 2026-01-02 | SentinelBehaviorInfo | Table added to tracking |
| 2026-01-02 | ThreatIntelExportOperation | Table added to tracking |
| 2026-01-02 | ThreatIntelIndicators | Column Source removed |
| 2026-01-02 | ThreatIntelObjects | Column Source removed |
| 2026-01-02 | DeviceBaselineComplianceAssessment | Table removed from tracking |
| 2026-01-02 | DeviceBaselineComplianceAssessmentKB | Table removed from tracking |
| 2026-01-02 | DeviceBaselineComplianceProfiles | Table removed from tracking |
| 2026-01-02 | OfficeActivity | Column UniqueSharingId added |
| 2026-01-02 | DeviceTvmCertificateInfo | Table removed from tracking |
| 2026-01-02 | DeviceTvmBrowserExtensionsKB | Table removed from tracking |
| 2026-01-02 | DeviceTvmHardwareFirmware | Table removed from tracking |
| 2026-01-02 | AADManagedIdentitySignInLogs | Table removed from tracking |
| 2026-01-02 | AADNonInteractiveUserSignInLogs | Table removed from tracking |
| 2026-01-02 | AADUserRiskEvents | Table removed from tracking |
| 2026-01-02 | AZKVAuditLogs | Table removed from tracking |
| 2026-01-02 | AZKVPolicyEvaluationDetailsLogs | Table removed from tracking |
| 2026-01-02 | AuditLogs | Table removed from tracking |
| 2026-01-02 | AzureDiagnostics | Table removed from tracking |
| 2026-01-02 | AzureMetrics | Table removed from tracking |
| 2026-01-02 | MicrosoftGraphActivityLogs | Table removed from tracking |
| 2026-01-02 | SigninLogs | Table removed from tracking |
| 2026-01-02 | DeviceTvmBrowserExtensions | Table removed from tracking |
| 2026-01-02 | GCPFirewallLogs | Table added to tracking |
| 2026-01-02 | OfficeActivity | Column SensitivityLabelId added |
| 2026-01-02 | OfficeActivity | Column MeetingDetailId added |
| 2026-01-02 | GCPIDS | Table added to tracking |
| 2026-01-02 | GCPLoadBalancer | Table added to tracking |
| 2026-01-02 | GCPMonitoring | Table added to tracking |
| 2026-01-02 | GCPNAT | Table added to tracking |
| 2026-01-02 | GCPNATAudit | Table added to tracking |
| 2026-01-02 | GCPResourceManager | Table added to tracking |
| 2026-01-02 | GCPVPCFlow | Table added to tracking |
| 2026-01-02 | GKEAPIServer | Table added to tracking |
| 2026-01-02 | GKEApplication | Table added to tracking |
| 2026-01-02 | GKEAudit | Table added to tracking |
| 2026-01-02 | GKEControllerManager | Table added to tracking |
| 2026-01-02 | GKEHPADecision | Table added to tracking |
| 2026-01-02 | OfficeActivity | Column ListItemUniqueId added |
| 2026-01-02 | GKEScheduler | Table added to tracking |
| 2026-01-02 | IlumioInsights | Table added to tracking |
| 2026-01-02 | LLMActivity | Table added to tracking |
| 2026-01-02 | MicrosoftPurviewInformationProtection | Column SensitivityLabelEventFailureData added |
| 2026-01-02 | MicrosoftPurviewInformationProtection | Column AutoSensitivityLabelPolicyInfo added |
| 2026-01-02 | OfficeActivity | Column UniqueTokenId removed |
| 2026-01-02 | OfficeActivity | Column IssuedAtTime removed |
| 2026-01-02 | OfficeActivity | Column AppAccessContext added |
| 2026-01-02 | OfficeActivity | Column Attendees added |
| 2026-01-02 | OfficeActivity | Column ArtifactsShared added |
| 2026-01-02 | OfficeActivity | Column IsJoinedFromLobby added |
| 2026-01-02 | OfficeActivity | Column JoinTime added |
| 2026-01-02 | OfficeActivity | Column DeviceInformation added |
| 2026-01-02 | GoogleWorkspaceReports | Table added to tracking |
| 2026-01-02 | PowerPlatformAdminActivity | Column EnvironmentId added |
| 2026-01-02 | DeviceInfo | Column DiscoverySources added |
| 2026-01-02 | DeviceInfo | Column IsTransient added |
| 2026-01-02 | IdentityInfo | Column Tags added |
| 2026-01-02 | IdentityInfo | Column UserAccountControl added |
| 2026-01-02 | IdentityInfo | Column SourceProviders added |
| 2026-01-02 | IdentityInfo | Column IdentityEnvironment added |
| 2026-01-02 | IdentityInfo | Column PrivilegedEntraPimRoles added |
| 2026-01-02 | IdentityInfo | Column AssignedRoles added |
| 2026-01-02 | IdentityInfo | Column GroupMembership added |
| 2026-01-02 | IdentityInfo | Column RiskStatus added |
| 2026-01-02 | IdentityInfo | Column TenantMembershipType added |
| 2026-01-02 | IdentityInfo | Column TimeGenerated added |
| 2026-01-02 | IdentityAccountInfo | Table added to tracking |
| 2026-01-02 | IdentityLogonEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityLogonEvents | Column _BilledSize removed |
| 2026-01-02 | IdentityLogonEvents | Column UncommonForUser added |
| 2026-01-02 | IdentityLogonEvents | Column LastSeenForUser added |
| 2026-01-02 | IdentityQueryEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityQueryEvents | Column _BilledSize removed |
| 2026-01-02 | IdentityInfo | Column State added |
| 2026-01-02 | IdentityInfo | Column RiskLevelDetails added |
| 2026-01-02 | IdentityInfo | Column RiskLevel added |
| 2026-01-02 | IdentityInfo | Column OtherMailAddresses added |
| 2026-01-02 | DeviceInfo | Column OsBuildRevision added |
| 2026-01-02 | AlertInfo | Column SentinelWorkspaceIds added |
| 2026-01-02 | AlertEvidence | Column SentinelWorkspaceIds added |
| 2026-01-02 | IdentityInfo | Column Timestamp added |
| 2026-01-02 | IdentityInfo | Column ReportId added |
| 2026-01-02 | IdentityInfo | Column IdentityId added |
| 2026-01-02 | IdentityInfo | Column OnPremObjectId added |
| 2026-01-02 | IdentityInfo | Column CriticalityLevel added |
| 2026-01-02 | IdentityDirectoryEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityInfo | Column DistinguishedName added |
| 2026-01-02 | IdentityInfo | Column Manager added |
| 2026-01-02 | IdentityInfo | Column Phone added |
| 2026-01-02 | IdentityInfo | Column CreatedDateTime added |
| 2026-01-02 | IdentityInfo | Column SourceProvider added |
| 2026-01-02 | IdentityInfo | Column ChangeSource added |
| 2026-01-02 | IdentityInfo | Column CompanyName added |
| 2026-01-02 | IdentityInfo | Column DeletedDateTime added |
| 2026-01-02 | IdentityInfo | Column EmployeeId added |
| 2026-01-02 | IdentityInfo | Column Address added |
| 2026-01-02 | IdentityDirectoryEvents | Column _BilledSize removed |
| 2026-01-02 | IdentityInfo | Column BlastRadius added |
| 2026-01-02 | CloudAppEvents | Column _IsBillable removed |
| 2026-01-02 | EmailUrlInfo | Column _IsBillable removed |
| 2026-01-02 | EmailUrlInfo | Column _BilledSize removed |
| 2026-01-02 | EmailUrlInfo | Column UrlChainId added |
| 2026-01-02 | EmailUrlInfo | Column UrlChainPosition added |
| 2026-01-02 | EmailPostDeliveryEvents | Column _IsBillable removed |
| 2026-01-02 | EmailPostDeliveryEvents | Column _BilledSize removed |
| 2026-01-02 | EmailPostDeliveryEvents | Column SenderFromAddress added |
| 2026-01-02 | EmailPostDeliveryEvents | Column EmailDirection added |
| 2026-01-02 | EmailAttachmentInfo | Column FileExtension added |
| 2026-01-02 | MessageEvents | Table added to tracking |
| 2026-01-02 | UrlClickEvents | Column _IsBillable removed |
| 2026-01-02 | UrlClickEvents | Column _BilledSize removed |
| 2026-01-02 | UrlClickEvents | Column AppName added |
| 2026-01-02 | UrlClickEvents | Column AppVersion added |
| 2026-01-02 | UrlClickEvents | Column SourceId added |
| 2026-01-02 | FileMaliciousContentInfo | Table added to tracking |
| 2026-01-02 | IdentityEvents | Table added to tracking |
| 2026-01-02 | CampaignInfo | Table added to tracking |
| 2026-01-02 | MessageUrlInfo | Table added to tracking |
| 2026-01-02 | EmailAttachmentInfo | Column _BilledSize removed |
| 2026-01-02 | MessagePostDeliveryEvents | Table added to tracking |
| 2026-01-02 | EmailEvents | Column IsFirstContact added |
| 2026-01-02 | CloudAppEvents | Column _BilledSize removed |
| 2026-01-02 | CloudAppEvents | Column SessionData added |
| 2026-01-02 | EmailAttachmentInfo | Column _IsBillable removed |
| 2026-01-02 | CloudAppEvents | Column AuditSource added |
| 2026-01-02 | CloudAppEvents | Column UncommonForUser added |
| 2026-01-02 | CloudAppEvents | Column LastSeenForUser added |
| 2026-01-02 | AIAgentsInfo | Table added to tracking |
| 2026-01-02 | EmailEvents | Column _IsBillable removed |
| 2026-01-02 | EmailEvents | Column _BilledSize removed |
| 2026-01-02 | CloudAppEvents | Column OAuthAppId added |
| 2026-01-02 | EmailEvents | Column DistributionList added |
| 2026-01-02 | EmailEvents | Column EmailSize added |
| 2026-01-02 | EmailEvents | Column ForwardingInformation added |
| 2026-01-02 | EmailEvents | Column Context added |
| 2026-01-02 | EmailEvents | Column To added |
| 2026-01-02 | EmailEvents | Column Cc added |
| 2026-01-02 | EmailEvents | Column RecipientDomain added |
| 2026-01-02 | EmailEvents | Column ThreatClassification added |
| 2026-01-02 | EmailEvents | Column ExchangeTransportRule added |
| 2024-10-19 | AZKVPolicyEvaluationDetailsLogs | Table added to tracking |
| 2024-10-19 | AZKVAuditLogs | Table added to tracking |
| 2024-10-19 | AzureMetrics | Table added to tracking |
| 2024-10-19 | AzureDiagnostics | Table added to tracking |
| 2024-10-18 | DeviceBaselineComplianceAssessmentKB | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareInventory | Table added to tracking |
| 2024-10-18 | DeviceTvmHardwareFirmware | Table added to tracking |
| 2024-10-18 | DeviceTvmCertificateInfo | Table added to tracking |
| 2024-10-18 | DeviceTvmInfoGathering | Table added to tracking |
| 2024-10-18 | DeviceTvmInfoGatheringKB | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareEvidenceBeta | Table added to tracking |
| 2024-10-18 | DeviceBaselineComplianceProfiles | Table added to tracking |
| 2024-10-18 | DeviceTvmBrowserExtensions | Table added to tracking |
| 2024-10-18 | DeviceTvmBrowserExtensionsKB | Table added to tracking |
| 2024-10-18 | CloudAuditEvents | Table added to tracking |
| 2024-10-18 | ASimFileEventLogs | Table added to tracking |
| 2024-10-18 | ExposureGraphEdges | Table added to tracking |
| 2024-10-18 | AADManagedIdentitySignInLogs | Table added to tracking |
| 2024-10-18 | AADNonInteractiveUserSignInLogs | Table added to tracking |
| 2024-10-18 | AADUserRiskEvents | Table added to tracking |
| 2024-10-18 | ASimAuditEventLogs | Table added to tracking |
| 2024-10-18 | ASimAuthenticationEventLogs | Table added to tracking |
| 2024-10-18 | ASimDhcpEventLogs | Table added to tracking |
| 2024-10-18 | ASimDnsActivityLogs | Table added to tracking |
| 2024-10-18 | DeviceBaselineComplianceAssessment | Table added to tracking |
| 2024-10-18 | ASimNetworkSessionLogs | Table added to tracking |
| 2024-10-18 | ExposureGraphNodes | Table added to tracking |
| 2024-10-18 | DeviceTvmSecureConfigurationAssessmentKB | Table added to tracking |
| 2024-10-18 | IdentityLogonEvents | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareVulnerabilitiesKB | Table added to tracking |
| 2024-10-18 | ASimProcessEventLogs | Table added to tracking |
| 2024-10-18 | AlertEvidence | Table added to tracking |
| 2024-10-18 | IdentityInfo | Table added to tracking |
| 2024-10-18 | IdentityQueryEvents | Table added to tracking |
| 2024-10-18 | IdentityDirectoryEvents | Table added to tracking |
| 2024-10-18 | CloudAppEvents | Table added to tracking |
| 2024-10-18 | EmailEvents | Table added to tracking |
| 2024-10-18 | EmailAttachmentInfo | Table added to tracking |
| 2024-10-18 | EmailUrlInfo | Table added to tracking |
| 2024-10-18 | EmailPostDeliveryEvents | Table added to tracking |
| 2024-10-18 | DeviceTvmSecureConfigurationAssessment | Table added to tracking |
| 2024-10-18 | UrlClickEvents | Table added to tracking |
| 2024-10-18 | DeviceNetworkInfo | Table added to tracking |
| 2024-10-18 | DeviceProcessEvents | Table added to tracking |
| 2024-10-18 | DeviceNetworkEvents | Table added to tracking |
| 2024-10-18 | DeviceFileEvents | Table added to tracking |
| 2024-10-18 | DeviceRegistryEvents | Table added to tracking |
| 2024-10-18 | DeviceLogonEvents | Table added to tracking |
| 2024-10-18 | DeviceImageLoadEvents | Table added to tracking |
| 2024-10-18 | DeviceEvents | Table added to tracking |
| 2024-10-18 | DeviceFileCertificateInfo | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareVulnerabilities | Table added to tracking |
| 2024-10-18 | DeviceInfo | Table added to tracking |
| 2024-10-18 | ASimRegistryEventLogs | Table added to tracking |
| 2024-10-18 | ThreatIntelIndicators | Table added to tracking |
| 2024-10-18 | ASimWebSessionLogs | Table added to tracking |
| 2024-10-18 | NetworkSessions | Table added to tracking |
| 2024-10-18 | OfficeActivity | Table added to tracking |
| 2024-10-18 | Operation | Table added to tracking |
| 2024-10-18 | PowerAppsActivity | Table added to tracking |
| 2024-10-18 | PowerAutomateActivity | Table added to tracking |
| 2024-10-18 | PowerBIActivity | Table added to tracking |
| 2024-10-18 | PowerPlatformAdminActivity | Table added to tracking |
| 2024-10-18 | PowerPlatformConnectorActivity | Table added to tracking |
| 2024-10-18 | PowerPlatformDlpActivity | Table added to tracking |
| 2024-10-18 | ProjectActivity | Table added to tracking |
| 2024-10-18 | MicrosoftPurviewInformationProtection | Table added to tracking |
| 2024-10-18 | SecurityEvent | Table added to tracking |
| 2024-10-18 | SentinelAudit | Table added to tracking |
| 2024-10-18 | SentinelHealth | Table added to tracking |
| 2024-10-18 | SigninLogs | Table added to tracking |
| 2024-10-18 | ThreatIntelObjects | Table added to tracking |
| 2024-10-18 | ThreatIntelligenceIndicator | Table added to tracking |
| 2024-10-18 | Usage | Table added to tracking |
| 2024-10-18 | UserAccessAnalytics | Table added to tracking |
| 2024-10-18 | UserPeerAnalytics | Table added to tracking |
| 2024-10-18 | Watchlist | Table added to tracking |
| 2024-10-18 | WindowsEvent | Table added to tracking |
| 2024-10-18 | SecurityIncident | Table added to tracking |
| 2024-10-18 | MicrosoftGraphActivityLogs | Table added to tracking |
| 2024-10-18 | McasShadowItReporting | Table added to tracking |
| 2024-10-18 | LinuxAuditLog | Table added to tracking |
| 2024-10-18 | AWSCloudTrail | Table added to tracking |
| 2024-10-18 | AWSCloudWatch | Table added to tracking |
| 2024-10-18 | AWSGuardDuty | Table added to tracking |
| 2024-10-18 | AWSVPCFlow | Table added to tracking |
| 2024-10-18 | AWSWAF | Table added to tracking |
| 2024-10-18 | Alert | Table added to tracking |
| 2024-10-18 | Anomalies | Table added to tracking |
| 2024-10-18 | AppCenterError | Table added to tracking |
| 2024-10-18 | AuditLogs | Table added to tracking |
| 2024-10-18 | AzureActivity | Table added to tracking |
| 2024-10-18 | BehaviorAnalytics | Table added to tracking |
| 2024-10-18 | CommonSecurityLog | Table added to tracking |
| 2024-10-18 | ComputerGroup | Table added to tracking |
| 2024-10-18 | ConfidentialWatchlist | Table added to tracking |
| 2024-10-18 | DataverseActivity | Table added to tracking |
| 2024-10-18 | DnsAuditEvents | Table added to tracking |
| 2024-10-18 | DnsEvents | Table added to tracking |
| 2024-10-18 | DnsInventory | Table added to tracking |
| 2024-10-18 | DynamicSummary | Table added to tracking |
| 2024-10-18 | Dynamics365Activity | Table added to tracking |
| 2024-10-18 | GCPAuditLogs | Table added to tracking |
| 2024-10-18 | GoogleCloudSCC | Table added to tracking |
| 2024-10-18 | HuntingBookmark | Table added to tracking |
| 2024-10-18 | ASimUserManagementActivityLogs | Table added to tracking |
| 2024-10-18 | AlertInfo | Table added to tracking |