Schema changes #
This page documents all changes to the schema.
Table schema changes #
| Date | Table | Action |
|---|---|---|
| 2026-02-27 | WindowsEvent | Table removed from tracking |
| 2026-02-27 | DeviceRegistryEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceRegistryEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceLogonEvents | Column TenantId removed |
| 2026-02-27 | DeviceLogonEvents | Column Type removed |
| 2026-02-27 | DeviceLogonEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceLogonEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceLogonEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceImageLoadEvents | Column TenantId removed |
| 2026-02-27 | DeviceImageLoadEvents | Column Type removed |
| 2026-02-27 | DeviceImageLoadEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceImageLoadEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceImageLoadEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceEvents | Column TenantId removed |
| 2026-02-27 | DeviceEvents | Column Type removed |
| 2026-02-27 | DeviceEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceRegistryEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceRegistryEvents | Column Type removed |
| 2026-02-27 | DeviceRegistryEvents | Column TenantId removed |
| 2026-02-27 | DeviceFileEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceNetworkInfo | Column Type removed |
| 2026-02-27 | DeviceNetworkInfo | Column SourceSystem removed |
| 2026-02-27 | DeviceNetworkInfo | Column MachineGroup removed |
| 2026-02-27 | DeviceNetworkInfo | Column TimeGenerated removed |
| 2026-02-27 | DeviceProcessEvents | Column TenantId removed |
| 2026-02-27 | DeviceProcessEvents | Column Type removed |
| 2026-02-27 | DeviceProcessEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceProcessEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceFileCertificateInfo | Column TenantId removed |
| 2026-02-27 | DeviceProcessEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceNetworkEvents | Column Type removed |
| 2026-02-27 | DeviceNetworkEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceNetworkEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceNetworkEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceFileEvents | Column TenantId removed |
| 2026-02-27 | DeviceFileEvents | Column Type removed |
| 2026-02-27 | DeviceFileEvents | Column SourceSystem removed |
| 2026-02-27 | DeviceFileEvents | Column MachineGroup removed |
| 2026-02-27 | DeviceNetworkEvents | Column TenantId removed |
| 2026-02-27 | DeviceNetworkInfo | Column TenantId removed |
| 2026-02-27 | DeviceFileCertificateInfo | Column Type removed |
| 2026-02-27 | DeviceFileCertificateInfo | Column MachineGroup removed |
| 2026-02-27 | DeviceTvmSoftwareInventory | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSoftwareInventory | Column MachineGroup removed |
| 2026-02-27 | DeviceTvmInfoGathering | Column TenantId removed |
| 2026-02-27 | DeviceTvmInfoGathering | Column Type removed |
| 2026-02-27 | DeviceTvmInfoGathering | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmInfoGathering | Column MachineGroup removed |
| 2026-02-27 | DeviceTvmInfoGatheringKB | Column TenantId removed |
| 2026-02-27 | DeviceTvmInfoGatheringKB | Column Type removed |
| 2026-02-27 | DeviceTvmInfoGatheringKB | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSoftwareEvidenceBeta | Column TenantId removed |
| 2026-02-27 | DeviceTvmSoftwareEvidenceBeta | Column Type removed |
| 2026-02-27 | DeviceTvmSoftwareEvidenceBeta | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSoftwareEvidenceBeta | Column MachineGroup removed |
| 2026-02-27 | CloudAuditEvents | Column TenantId removed |
| 2026-02-27 | CloudAuditEvents | Column Type removed |
| 2026-02-27 | CloudAuditEvents | Column SourceSystem removed |
| 2026-02-27 | CloudAuditEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceTvmSoftwareInventory | Column Type removed |
| 2026-02-27 | DeviceTvmSoftwareInventory | Column TenantId removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessmentKB | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessmentKB | Column Type removed |
| 2026-02-27 | DeviceFileCertificateInfo | Column TimeGenerated removed |
| 2026-02-27 | DisruptionAndResponseEvents | Column TenantId removed |
| 2026-02-27 | DisruptionAndResponseEvents | Column Type removed |
| 2026-02-27 | DisruptionAndResponseEvents | Column SourceSystem removed |
| 2026-02-27 | DisruptionAndResponseEvents | Column MachineGroup removed |
| 2026-02-27 | DisruptionAndResponseEvents | Column TimeGenerated removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilities | Column TenantId removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilities | Column SourceSystem removed |
| 2026-02-27 | DeviceFileCertificateInfo | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilities | Column MachineGroup removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilitiesKB | Column Type removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilitiesKB | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessment | Column TenantId removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessment | Column Type removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessment | Column SourceSystem removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessment | Column MachineGroup removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessment | Column TimeGenerated removed |
| 2026-02-27 | DeviceTvmSecureConfigurationAssessmentKB | Column TenantId removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilitiesKB | Column TenantId removed |
| 2026-02-27 | DeviceInfo | Column TimeGenerated removed |
| 2026-02-27 | DeviceInfo | Column SourceSystem removed |
| 2026-02-27 | DeviceInfo | Column Type removed |
| 2026-02-27 | IdentityQueryEvents | Column TenantId removed |
| 2026-02-27 | IdentityQueryEvents | Column Type removed |
| 2026-02-27 | IdentityQueryEvents | Column SourceSystem removed |
| 2026-02-27 | IdentityQueryEvents | Column TimeGenerated removed |
| 2026-02-27 | IdentityDirectoryEvents | Column TenantId removed |
| 2026-02-27 | IdentityDirectoryEvents | Column Type removed |
| 2026-02-27 | IdentityDirectoryEvents | Column SourceSystem removed |
| 2026-02-27 | IdentityDirectoryEvents | Column TimeGenerated removed |
| 2026-02-27 | IdentityEvents | Column TenantId removed |
| 2026-02-27 | IdentityEvents | Column Type removed |
| 2026-02-27 | IdentityEvents | Column SourceSystem removed |
| 2026-02-27 | IdentityEvents | Column TimeGenerated removed |
| 2026-02-27 | CloudAppEvents | Column TenantId removed |
| 2026-02-27 | CloudAppEvents | Column Type removed |
| 2026-02-27 | CloudAppEvents | Column SourceSystem removed |
| 2026-02-27 | CloudAppEvents | Column TimeGenerated removed |
| 2026-02-27 | AIAgentsInfo | Column TenantId removed |
| 2026-02-27 | IdentityLogonEvents | Column TimeGenerated removed |
| 2026-02-27 | IdentityLogonEvents | Column SourceSystem removed |
| 2026-02-27 | IdentityLogonEvents | Column Type removed |
| 2026-02-27 | IdentityLogonEvents | Column TenantId removed |
| 2026-02-27 | AlertInfo | Column TenantId removed |
| 2026-02-27 | AlertInfo | Column Type removed |
| 2026-02-27 | AlertInfo | Column SourceSystem removed |
| 2026-02-27 | AlertInfo | Column MachineGroup removed |
| 2026-02-27 | AlertInfo | Column TimeGenerated removed |
| 2026-02-27 | AlertEvidence | Column TenantId removed |
| 2026-02-27 | AlertEvidence | Column Type removed |
| 2026-02-27 | AlertEvidence | Column SourceSystem removed |
| 2026-02-27 | AIAgentsInfo | Column Type removed |
| 2026-02-27 | AlertEvidence | Column MachineGroup removed |
| 2026-02-27 | IdentityInfo | Column RiskStatus removed |
| 2026-02-27 | IdentityInfo | Column TenantMembershipType removed |
| 2026-02-27 | IdentityInfo | Column TenantId removed |
| 2026-02-27 | IdentityInfo | Column SourceSystem removed |
| 2026-02-27 | IdentityInfo | Column TimeGenerated removed |
| 2026-02-27 | IdentityAccountInfo | Column TenantId removed |
| 2026-02-27 | IdentityAccountInfo | Column SourceSystem removed |
| 2026-02-27 | IdentityAccountInfo | Column TimeGenerated removed |
| 2026-02-27 | AlertEvidence | Column TimeGenerated removed |
| 2026-02-27 | AIAgentsInfo | Column SourceSystem removed |
| 2026-02-27 | AIAgentsInfo | Column TimeGenerated removed |
| 2026-02-27 | EmailEvents | Column TenantId removed |
| 2026-02-27 | MessageUrlInfo | Column TimeGenerated removed |
| 2026-02-27 | MessagePostDeliveryEvents | Column TenantId removed |
| 2026-02-27 | MessagePostDeliveryEvents | Column Type removed |
| 2026-02-27 | MessagePostDeliveryEvents | Column SourceSystem removed |
| 2026-02-27 | MessagePostDeliveryEvents | Column TimeGenerated removed |
| 2026-02-27 | UrlClickEvents | Column TenantId removed |
| 2026-02-27 | UrlClickEvents | Column Type removed |
| 2026-02-27 | UrlClickEvents | Column SourceSystem removed |
| 2026-02-27 | MessageUrlInfo | Column SourceSystem removed |
| 2026-02-27 | UrlClickEvents | Column TimeGenerated removed |
| 2026-02-27 | FileMaliciousContentInfo | Column Type removed |
| 2026-02-27 | FileMaliciousContentInfo | Column SourceSystem removed |
| 2026-02-27 | FileMaliciousContentInfo | Column TimeGenerated removed |
| 2026-02-27 | CampaignInfo | Column TenantId removed |
| 2026-02-27 | CampaignInfo | Column Type removed |
| 2026-02-27 | CampaignInfo | Column SourceSystem removed |
| 2026-02-27 | CampaignInfo | Column TimeGenerated removed |
| 2026-02-27 | DeviceInfo | Column TenantId removed |
| 2026-02-27 | FileMaliciousContentInfo | Column TenantId removed |
| 2026-02-27 | CloudProcessEvents | Column TenantId removed |
| 2026-02-27 | MessageUrlInfo | Column Type removed |
| 2026-02-27 | MessageEvents | Column TimeGenerated removed |
| 2026-02-27 | EmailEvents | Column Type removed |
| 2026-02-27 | EmailEvents | Column SourceSystem removed |
| 2026-02-27 | EmailEvents | Column TimeGenerated removed |
| 2026-02-27 | EmailAttachmentInfo | Column TenantId removed |
| 2026-02-27 | EmailAttachmentInfo | Column Type removed |
| 2026-02-27 | EmailAttachmentInfo | Column SourceSystem removed |
| 2026-02-27 | EmailAttachmentInfo | Column TimeGenerated removed |
| 2026-02-27 | EmailUrlInfo | Column TenantId removed |
| 2026-02-27 | MessageUrlInfo | Column TenantId removed |
| 2026-02-27 | EmailUrlInfo | Column Type removed |
| 2026-02-27 | EmailUrlInfo | Column TimeGenerated removed |
| 2026-02-27 | EmailPostDeliveryEvents | Column TenantId removed |
| 2026-02-27 | EmailPostDeliveryEvents | Column Type removed |
| 2026-02-27 | EmailPostDeliveryEvents | Column SourceSystem removed |
| 2026-02-27 | EmailPostDeliveryEvents | Column TimeGenerated removed |
| 2026-02-27 | MessageEvents | Column TenantId removed |
| 2026-02-27 | MessageEvents | Column Type removed |
| 2026-02-27 | MessageEvents | Column SourceSystem removed |
| 2026-02-27 | EmailUrlInfo | Column SourceSystem removed |
| 2026-02-27 | CloudProcessEvents | Column Type removed |
| 2026-02-27 | DeviceTvmSoftwareVulnerabilities | Column Type removed |
| 2026-02-27 | CloudProcessEvents | Column TimeGenerated removed |
| 2026-02-27 | DataverseActivity | Table removed from tracking |
| 2026-02-27 | DnsAuditEvents | Table removed from tracking |
| 2026-02-27 | DnsEvents | Table removed from tracking |
| 2026-02-27 | DnsInventory | Table removed from tracking |
| 2026-02-27 | DynamicSummary | Table removed from tracking |
| 2026-02-27 | Dynamics365Activity | Table removed from tracking |
| 2026-02-27 | GCPApigee | Table removed from tracking |
| 2026-02-27 | GCPAuditLogs | Table removed from tracking |
| 2026-02-27 | GCPCDN | Table removed from tracking |
| 2026-02-27 | CloudProcessEvents | Column SourceSystem removed |
| 2026-02-27 | GCPCloudSQL | Table removed from tracking |
| 2026-02-27 | GCPComputeEngine | Table removed from tracking |
| 2026-02-27 | GCPDNS | Table removed from tracking |
| 2026-02-27 | GCPFirewallLogs | Table removed from tracking |
| 2026-02-27 | GCPIAM | Table removed from tracking |
| 2026-02-27 | GCPIDS | Table removed from tracking |
| 2026-02-27 | GCPLoadBalancer | Table removed from tracking |
| 2026-02-27 | CrowdStrikeVulnerabilities | Table removed from tracking |
| 2026-02-27 | CrowdStrikeIncidents | Table removed from tracking |
| 2026-02-27 | CrowdStrikeHosts | Table removed from tracking |
| 2026-02-27 | CrowdStrikeDetections | Table removed from tracking |
| 2026-02-27 | AWSRoute53Resolver | Table removed from tracking |
| 2026-02-27 | AWSS3ServerAccess | Table removed from tracking |
| 2026-02-27 | AWSSecurityHubFindings | Table removed from tracking |
| 2026-02-27 | AWSVPCFlow | Table removed from tracking |
| 2026-02-27 | AWSWAF | Table removed from tracking |
| 2026-02-27 | AggregatedSecurityAlert | Table removed from tracking |
| 2026-02-27 | Alert | Table removed from tracking |
| 2026-02-27 | Anomalies | Table removed from tracking |
| 2026-02-27 | GCPMonitoring | Table removed from tracking |
| 2026-02-27 | AppCenterError | Table removed from tracking |
| 2026-02-27 | BehaviorAnalytics | Table removed from tracking |
| 2026-02-27 | CommonSecurityLog | Table removed from tracking |
| 2026-02-27 | CommunicationComplianceActivity | Table removed from tracking |
| 2026-02-27 | ComputerGroup | Table removed from tracking |
| 2026-02-27 | ConfidentialWatchlist | Table removed from tracking |
| 2026-02-27 | CopilotActivity | Table removed from tracking |
| 2026-02-27 | CrowdStrikeAlerts | Table removed from tracking |
| 2026-02-27 | CrowdStrikeCases | Table removed from tracking |
| 2026-02-27 | AzureActivity | Table removed from tracking |
| 2026-02-27 | GCPNAT | Table removed from tracking |
| 2026-02-27 | GCPNATAudit | Table removed from tracking |
| 2026-02-27 | GCPResourceManager | Table removed from tracking |
| 2026-02-27 | PowerPlatformConnectorActivity | Table removed from tracking |
| 2026-02-27 | PowerPlatformDlpActivity | Table removed from tracking |
| 2026-02-27 | ProjectActivity | Table removed from tracking |
| 2026-02-27 | QualysKnowledgeBase | Table removed from tracking |
| 2026-02-27 | SecurityAlert | Table removed from tracking |
| 2026-02-27 | SecurityEvent | Table removed from tracking |
| 2026-02-27 | SecurityIncident | Table removed from tracking |
| 2026-02-27 | SentinelAudit | Table removed from tracking |
| 2026-02-27 | PowerPlatformAdminActivity | Table removed from tracking |
| 2026-02-27 | SentinelBehaviorEntities | Table removed from tracking |
| 2026-02-27 | SentinelHealth | Table removed from tracking |
| 2026-02-27 | ThreatIntelExportOperation | Table removed from tracking |
| 2026-02-27 | ThreatIntelIndicators | Table removed from tracking |
| 2026-02-27 | ThreatIntelObjects | Table removed from tracking |
| 2026-02-27 | ThreatIntelligenceIndicator | Table removed from tracking |
| 2026-02-27 | Usage | Table removed from tracking |
| 2026-02-27 | UserAccessAnalytics | Table removed from tracking |
| 2026-02-27 | UserPeerAnalytics | Table removed from tracking |
| 2026-02-27 | SentinelBehaviorInfo | Table removed from tracking |
| 2026-02-27 | AWSNetworkFirewallTls | Table removed from tracking |
| 2026-02-27 | PowerBIActivity | Table removed from tracking |
| 2026-02-27 | PowerAppsActivity | Table removed from tracking |
| 2026-02-27 | GCPVPCFlow | Table removed from tracking |
| 2026-02-27 | GKEAPIServer | Table removed from tracking |
| 2026-02-27 | GKEApplication | Table removed from tracking |
| 2026-02-27 | GKEAudit | Table removed from tracking |
| 2026-02-27 | GKEControllerManager | Table removed from tracking |
| 2026-02-27 | GKEHPADecision | Table removed from tracking |
| 2026-02-27 | GKEScheduler | Table removed from tracking |
| 2026-02-27 | GoogleCloudSCC | Table removed from tracking |
| 2026-02-27 | PowerAutomateActivity | Table removed from tracking |
| 2026-02-27 | GoogleWorkspaceReports | Table removed from tracking |
| 2026-02-27 | IlumioInsights | Table removed from tracking |
| 2026-02-27 | LinuxAuditLog | Table removed from tracking |
| 2026-02-27 | McasShadowItReporting | Table removed from tracking |
| 2026-02-27 | MicrosoftPurviewInformationProtection | Table removed from tracking |
| 2026-02-27 | NetworkSessions | Table removed from tracking |
| 2026-02-27 | OfficeActivity | Table removed from tracking |
| 2026-02-27 | OktaSystemLogs | Table removed from tracking |
| 2026-02-27 | Operation | Table removed from tracking |
| 2026-02-27 | HuntingBookmark | Table removed from tracking |
| 2026-02-27 | AWSNetworkFirewallFlow | Table removed from tracking |
| 2026-02-27 | GCPCloudRun | Table removed from tracking |
| 2026-02-27 | AWSNLBAccessLogs | Table removed from tracking |
| 2026-02-27 | EntraIdSignInEvents | Column SourceSystem removed |
| 2026-02-27 | EntraIdSignInEvents | Column TimeGenerated removed |
| 2026-02-27 | EntraIdSpnSignInEvents | Column TenantId removed |
| 2026-02-27 | EntraIdSpnSignInEvents | Column Type removed |
| 2026-02-27 | EntraIdSpnSignInEvents | Column SourceSystem removed |
| 2026-02-27 | EntraIdSpnSignInEvents | Column TimeGenerated removed |
| 2026-02-27 | GraphAPIAuditEvents | Column TenantId removed |
| 2026-02-27 | GraphAPIAuditEvents | Column Type removed |
| 2026-02-27 | GraphAPIAuditEvents | Column SourceSystem removed |
| 2026-02-27 | GraphAPIAuditEvents | Column TimeGenerated removed |
| 2026-02-27 | BehaviorInfo | Column TenantId removed |
| 2026-02-27 | BehaviorInfo | Column Type removed |
| 2026-02-27 | BehaviorInfo | Column SourceSystem removed |
| 2026-02-27 | BehaviorInfo | Column TimeGenerated removed |
| 2026-02-27 | BehaviorInfo | Column MachineGroup removed |
| 2026-02-27 | BehaviorInfo | Column Title removed |
| 2026-02-27 | BehaviorInfo | Column _IsBillable removed |
| 2026-02-27 | EntraIdSignInEvents | Column Type removed |
| 2026-02-27 | EntraIdSignInEvents | Column TenantId removed |
| 2026-02-27 | AADSignInEventsBeta | Column TimeGenerated removed |
| 2026-02-27 | AADSignInEventsBeta | Column SourceSystem removed |
| 2026-02-27 | CloudStorageAggregatedEvents | Column TenantId removed |
| 2026-02-27 | CloudStorageAggregatedEvents | Column Type removed |
| 2026-02-27 | CloudStorageAggregatedEvents | Column SourceSystem removed |
| 2026-02-27 | CloudStorageAggregatedEvents | Column TimeGenerated removed |
| 2026-02-27 | ExposureGraphNodes | Column TenantId removed |
| 2026-02-27 | ExposureGraphNodes | Column Type removed |
| 2026-02-27 | ExposureGraphNodes | Column SourceSystem removed |
| 2026-02-27 | AWSNetworkFirewallAlert | Table removed from tracking |
| 2026-02-27 | BehaviorInfo | Column _BilledSize removed |
| 2026-02-27 | ExposureGraphEdges | Column Type removed |
| 2026-02-27 | ConnectorStatusInfo | Column Type removed |
| 2026-02-27 | ConnectorStatusInfo | Column SourceSystem removed |
| 2026-02-27 | AADSpnSignInEventsBeta | Column TenantId removed |
| 2026-02-27 | AADSpnSignInEventsBeta | Column Type removed |
| 2026-02-27 | AADSpnSignInEventsBeta | Column SourceSystem removed |
| 2026-02-27 | AADSpnSignInEventsBeta | Column TimeGenerated removed |
| 2026-02-27 | AADSignInEventsBeta | Column TenantId removed |
| 2026-02-27 | AADSignInEventsBeta | Column Type removed |
| 2026-02-27 | ExposureGraphEdges | Column SourceSystem removed |
| 2026-02-27 | BehaviorInfo | Column _ResourceId removed |
| 2026-02-27 | ExposureGraphEdges | Column TenantId removed |
| 2026-02-27 | BehaviorEntities | Column TenantId removed |
| 2026-02-27 | ASimAlertEventLogs | Table removed from tracking |
| 2026-02-27 | ASimAuditEventLogs | Table removed from tracking |
| 2026-02-27 | ASimAuthenticationEventLogs | Table removed from tracking |
| 2026-02-27 | ASimDhcpEventLogs | Table removed from tracking |
| 2026-02-27 | ASimDnsActivityLogs | Table removed from tracking |
| 2026-02-27 | ASimFileEventLogs | Table removed from tracking |
| 2026-02-27 | ASimNetworkSessionLogs | Table removed from tracking |
| 2026-02-27 | ASimProcessEventLogs | Table removed from tracking |
| 2026-02-27 | ABAPUserDetails | Table removed from tracking |
| 2026-02-27 | ASimRegistryEventLogs | Table removed from tracking |
| 2026-02-27 | ASimWebSessionLogs | Table removed from tracking |
| 2026-02-27 | AWSALBAccessLogs | Table removed from tracking |
| 2026-02-27 | AWSCloudTrail | Table removed from tracking |
| 2026-02-27 | AWSCloudWatch | Table removed from tracking |
| 2026-02-27 | AWSEKSLogs | Table removed from tracking |
| 2026-02-27 | AWSELBFlowLogs | Table removed from tracking |
| 2026-02-27 | AWSGuardDuty | Table removed from tracking |
| 2026-02-27 | BehaviorInfo | Column _SubscriptionId removed |
| 2026-02-27 | ASimUserManagementActivityLogs | Table removed from tracking |
| 2026-02-27 | ABAPTableDataLog | Table removed from tracking |
| 2026-02-27 | Watchlist | Table removed from tracking |
| 2026-02-27 | ABAPAuthorizationDetails | Table removed from tracking |
| 2026-02-27 | BehaviorEntities | Column Type removed |
| 2026-02-27 | BehaviorEntities | Column SourceSystem removed |
| 2026-02-27 | BehaviorEntities | Column TimeGenerated removed |
| 2026-02-27 | BehaviorEntities | Column MachineGroup removed |
| 2026-02-27 | BehaviorEntities | Column CloudResource removed |
| 2026-02-27 | BehaviorEntities | Column CloudPlatform removed |
| 2026-02-27 | BehaviorEntities | Column CloudResourceType removed |
| 2026-02-27 | BehaviorEntities | Column CloudResourceId removed |
| 2026-02-27 | BehaviorEntities | Column CloudSubscriptionId removed |
| 2026-02-27 | ABAPChangeDocsLog | Table removed from tracking |
| 2026-02-27 | BehaviorEntities | Column _BilledSize removed |
| 2026-02-27 | BehaviorEntities | Column _ResourceId removed |
| 2026-02-27 | BehaviorEntities | Column _SubscriptionId removed |
| 2026-02-27 | OAuthAppInfo | Column TenantId removed |
| 2026-02-27 | OAuthAppInfo | Column Type removed |
| 2026-02-27 | OAuthAppInfo | Column SourceSystem removed |
| 2026-02-27 | OAuthAppInfo | Column TimeGenerated removed |
| 2026-02-27 | ABAPAuditLog | Table removed from tracking |
| 2026-02-27 | BehaviorEntities | Column _IsBillable removed |
| 2026-02-18 | BehaviorEntities | Column CloudResource added |
| 2026-02-18 | BehaviorInfo | Column _IsBillable added |
| 2026-02-18 | BehaviorInfo | Column _BilledSize added |
| 2026-02-18 | BehaviorInfo | Column _ResourceId added |
| 2026-02-18 | BehaviorInfo | Column _SubscriptionId added |
| 2026-02-18 | BehaviorEntities | Column CloudPlatform added |
| 2026-02-18 | BehaviorInfo | Column Title added |
| 2026-02-18 | BehaviorEntities | Column CloudResourceId added |
| 2026-02-18 | BehaviorEntities | Column CloudSubscriptionId added |
| 2026-02-18 | BehaviorEntities | Column _IsBillable added |
| 2026-02-18 | BehaviorEntities | Column _BilledSize added |
| 2026-02-18 | BehaviorEntities | Column _ResourceId added |
| 2026-02-18 | BehaviorEntities | Column _SubscriptionId added |
| 2026-02-18 | BehaviorEntities | Column CloudResourceType added |
| 2026-02-15 | StorageTableLogs | Table removed from tracking |
| 2026-02-15 | StorageQueueLogs | Table removed from tracking |
| 2026-02-15 | StorageFileLogs | Table removed from tracking |
| 2026-02-15 | StorageBlobLogs | Table removed from tracking |
| 2026-02-15 | AzureMetrics | Table removed from tracking |
| 2026-02-15 | AWSEKSLogs | Table added to tracking |
| 2026-02-11 | StorageBlobLogs | Table added to tracking |
| 2026-02-11 | AzureMetrics | Table added to tracking |
| 2026-02-11 | StorageQueueLogs | Table added to tracking |
| 2026-02-11 | StorageFileLogs | Table added to tracking |
| 2026-02-11 | StorageTableLogs | Table added to tracking |
| 2026-02-10 | AzureMetrics | Table removed from tracking |
| 2026-02-10 | AzureDiagnostics | Table removed from tracking |
| 2026-02-10 | AZKVPolicyEvaluationDetailsLogs | Table removed from tracking |
| 2026-02-10 | AZKVAuditLogs | Table removed from tracking |
| 2026-02-10 | BehaviorEntities | Column MachineGroup added |
| 2026-02-10 | BehaviorInfo | Column MachineGroup added |
| 2026-02-10 | EntraIdSpnSignInEvents | Column UniqueTokenId added |
| 2026-02-10 | EntraIdSignInEvents | Column IsSignInThroughGlobalSecureAccess added |
| 2026-02-10 | EntraIdSignInEvents | Column UniqueTokenId added |
| 2026-02-08 | AZKVPolicyEvaluationDetailsLogs | Table added to tracking |
| 2026-02-08 | AZKVAuditLogs | Table added to tracking |
| 2026-02-08 | AzureMetrics | Table added to tracking |
| 2026-02-08 | AzureDiagnostics | Table added to tracking |
| 2026-02-05 | CrowdStrikeDetections | Column Objective added |
| 2026-02-05 | CrowdStrikeDetections | Column MitreAttack added |
| 2026-02-05 | CrowdStrikeDetections | Column Name added |
| 2026-02-05 | CrowdStrikeDetections | Column References added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceEventModel added |
| 2026-02-05 | CrowdStrikeDetections | Column Tactics added |
| 2026-02-05 | CrowdStrikeDetections | Column TacticIds added |
| 2026-02-05 | CrowdStrikeDetections | Column Id added |
| 2026-02-05 | CrowdStrikeDetections | Column Techniques added |
| 2026-02-05 | CrowdStrikeDetections | Column TechniqueIds added |
| 2026-02-05 | CrowdStrikeDetections | Column XdrDetectionId added |
| 2026-02-05 | CrowdStrikeDetections | Column AddedPrivileges added |
| 2026-02-05 | CrowdStrikeDetections | Column AggregateId added |
| 2026-02-05 | CrowdStrikeDetections | Column PolyId added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceAccountObjectGuid added |
| 2026-02-05 | CrowdStrikeDetections | Column Privileges added |
| 2026-02-05 | CrowdStrikeDetections | Column Scenario added |
| 2026-02-05 | CrowdStrikeDetections | Column Severity added |
| 2026-02-05 | CrowdStrikeDetections | Column SeverityName added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceAccountDomain added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceAccountName added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceAccountObjectSid added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceAccountSamAccountName added |
| 2026-02-05 | CrowdStrikeDetections | Column SourceAccountUpn added |
| 2026-02-05 | CrowdStrikeDetections | Column Tactic added |
| 2026-02-05 | CrowdStrikeDetections | Column Technique added |
| 2026-02-05 | CrowdStrikeDetections | Column TacticId added |
| 2026-02-05 | CrowdStrikeDetections | Column EntityValues added |
| 2026-02-05 | CrowdStrikeDetections | Column PreviousPrivileges added |
| 2026-02-05 | CrowdStrikeDetections | Column TechniqueId added |
| 2026-02-05 | CrowdStrikeDetections | Column Entities added |
| 2026-02-05 | CrowdStrikeDetections | Column Description added |
| 2026-02-05 | CrowdStrikeDetections | Column EndTime added |
| 2026-02-05 | CrowdStrikeCases | Table added to tracking |
| 2026-02-02 | SecurityAlert | Table added to tracking |
| 2026-02-01 | GCPCloudRun | Column JsonPayloadRequest added |
| 2026-02-01 | GCPCloudRun | Column JsonPayloadMessage added |
| 2026-02-01 | DisruptionAndResponseEvents | Action type added: SafeBootGuardPolicyRemoved |
| 2026-02-01 | DisruptionAndResponseEvents | Action type added: SafeBootGuardPolicyApplied |
| 2026-02-01 | DisruptionAndResponseEvents | Action type added: GroupPolicyHardeningPolicyRemoved |
| 2026-02-01 | DisruptionAndResponseEvents | Action type added: GroupPolicyHardeningPolicyApplied |
| 2026-01-27 | DisruptionAndResponseEvents | Action type removed: GroupPolicyHardeningPolicyApplied |
| 2026-01-27 | DisruptionAndResponseEvents | Action type removed: GroupPolicyHardeningPolicyRemoved |
| 2026-01-27 | DisruptionAndResponseEvents | Action type removed: SafeBootGuardPolicyRemoved |
| 2026-01-27 | DisruptionAndResponseEvents | Action type removed: SafeBootGuardPolicyApplied |
| 2026-01-26 | DisruptionAndResponseEvents | Action type added: SafeBootGuardPolicyRemoved |
| 2026-01-26 | DisruptionAndResponseEvents | Action type added: SafeBootGuardPolicyApplied |
| 2026-01-26 | DisruptionAndResponseEvents | Action type added: GroupPolicyHardeningPolicyRemoved |
| 2026-01-26 | DisruptionAndResponseEvents | Action type added: GroupPolicyHardeningPolicyApplied |
| 2026-01-24 | LLMActivity | Table removed from tracking |
| 2026-01-24 | QualysKnowledgeBase | Table added to tracking |
| 2026-01-24 | CopilotActivity | Table added to tracking |
| 2026-01-24 | ASimAlertEventLogs | Table added to tracking |
| 2026-01-12 | GraphAPIAuditEvents | Column ResponseSize added |
| 2026-01-12 | DeviceEvents | Action type added: UserAccountPasswordResetAttempt |
| 2026-01-05 | ContainerRegistryRepositoryEvents | Table removed from tracking |
| 2026-01-05 | ContainerRegistryLoginEvents | Table removed from tracking |
| 2026-01-05 | AzureMetrics | Table removed from tracking |
| 2026-01-04 | AzureDiagnostics | Table removed from tracking |
| 2026-01-04 | AppServiceServerlessSecurityPluginData | Table removed from tracking |
| 2026-01-04 | AppServicePlatformLogs | Table removed from tracking |
| 2026-01-04 | AppServiceIPSecAuditLogs | Table removed from tracking |
| 2026-01-04 | AppServiceHTTPLogs | Table removed from tracking |
| 2026-01-04 | AppServiceFileAuditLogs | Table removed from tracking |
| 2026-01-04 | AppServiceConsoleLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAuditLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAppLogs | Table removed from tracking |
| 2026-01-04 | AppServiceAntivirusScanAuditLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSpringAppConsoleLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSessionPoolEventLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSessionLifecycleLogs | Table removed from tracking |
| 2026-01-04 | AppEnvSessionConsoleLogs | Table removed from tracking |
| 2026-01-04 | AzureMetricsV2 | Table removed from tracking |
| 2026-01-04 | AppServiceAuthenticationLogs | Table removed from tracking |
| 2026-01-04 | ContainerAppConsoleLogs | Table removed from tracking |
| 2026-01-04 | LAJobLogs | Table removed from tracking |
| 2026-01-04 | Event | Table removed from tracking |
| 2026-01-04 | ContainerAppSystemLogs | Table removed from tracking |
| 2026-01-04 | Syslog | Table removed from tracking |
| 2026-01-04 | StorageTableLogs | Table removed from tracking |
| 2026-01-04 | StorageQueueLogs | Table removed from tracking |
| 2026-01-04 | StorageFileLogs | Table removed from tracking |
| 2026-01-04 | StorageBlobLogs | Table removed from tracking |
| 2026-01-04 | OTelTraces | Table removed from tracking |
| 2026-01-04 | OTelSpans | Table removed from tracking |
| 2026-01-04 | OTelTracesAgent | Table removed from tracking |
| 2026-01-04 | OTelLogs | Table removed from tracking |
| 2026-01-04 | OTelEvents | Table removed from tracking |
| 2026-01-04 | LogicAppWorkflowRuntime | Table removed from tracking |
| 2026-01-04 | LASummaryLogs | Table removed from tracking |
| 2026-01-04 | LAQueryLogs | Table removed from tracking |
| 2026-01-04 | Heartbeat | Table removed from tracking |
| 2026-01-04 | FunctionAppLogs | Table removed from tracking |
| 2026-01-04 | OTelResources | Table removed from tracking |
| 2026-01-03 | AppServiceHTTPLogs | Table added to tracking |
| 2026-01-03 | AzureMetricsV2 | Table added to tracking |
| 2026-01-03 | AzureMetrics | Table added to tracking |
| 2026-01-03 | AzureDiagnostics | Table added to tracking |
| 2026-01-03 | AppServiceServerlessSecurityPluginData | Table added to tracking |
| 2026-01-03 | AppServicePlatformLogs | Table added to tracking |
| 2026-01-03 | AppServiceIPSecAuditLogs | Table added to tracking |
| 2026-01-03 | AppServiceFileAuditLogs | Table added to tracking |
| 2026-01-03 | AppEnvSessionConsoleLogs | Table added to tracking |
| 2026-01-03 | AppServiceAuthenticationLogs | Table added to tracking |
| 2026-01-03 | AppServiceAuditLogs | Table added to tracking |
| 2026-01-03 | AppServiceAppLogs | Table added to tracking |
| 2026-01-03 | AppServiceAntivirusScanAuditLogs | Table added to tracking |
| 2026-01-03 | AppEnvSpringAppConsoleLogs | Table added to tracking |
| 2026-01-03 | AppEnvSessionPoolEventLogs | Table added to tracking |
| 2026-01-03 | AppEnvSessionLifecycleLogs | Table added to tracking |
| 2026-01-03 | ContainerAppConsoleLogs | Table added to tracking |
| 2026-01-03 | AppServiceConsoleLogs | Table added to tracking |
| 2026-01-03 | ContainerAppSystemLogs | Table added to tracking |
| 2026-01-03 | LAQueryLogs | Table added to tracking |
| 2026-01-03 | ContainerRegistryRepositoryEvents | Table added to tracking |
| 2026-01-03 | ContainerRegistryLoginEvents | Table added to tracking |
| 2026-01-03 | Syslog | Table added to tracking |
| 2026-01-03 | StorageTableLogs | Table added to tracking |
| 2026-01-03 | StorageQueueLogs | Table added to tracking |
| 2026-01-03 | StorageFileLogs | Table added to tracking |
| 2026-01-03 | OTelTracesAgent | Table added to tracking |
| 2026-01-03 | OTelTraces | Table added to tracking |
| 2026-01-03 | OTelSpans | Table added to tracking |
| 2026-01-03 | OTelResources | Table added to tracking |
| 2026-01-03 | StorageBlobLogs | Table added to tracking |
| 2026-01-03 | OTelEvents | Table added to tracking |
| 2026-01-03 | Event | Table added to tracking |
| 2026-01-03 | OTelLogs | Table added to tracking |
| 2026-01-03 | Heartbeat | Table added to tracking |
| 2026-01-03 | LAJobLogs | Table added to tracking |
| 2026-01-03 | FunctionAppLogs | Table added to tracking |
| 2026-01-03 | LASummaryLogs | Table added to tracking |
| 2026-01-03 | LogicAppWorkflowRuntime | Table added to tracking |
| 2026-01-02 | EmailAttachmentInfo | Column FileExtension added |
| 2026-01-02 | EmailPostDeliveryEvents | Column SenderFromAddress added |
| 2026-01-02 | EmailPostDeliveryEvents | Column _BilledSize removed |
| 2026-01-02 | EmailPostDeliveryEvents | Column _IsBillable removed |
| 2026-01-02 | EmailUrlInfo | Column UrlChainPosition added |
| 2026-01-02 | EmailUrlInfo | Column UrlChainId added |
| 2026-01-02 | EmailUrlInfo | Column _BilledSize removed |
| 2026-01-02 | EmailUrlInfo | Column _IsBillable removed |
| 2026-01-02 | EmailPostDeliveryEvents | Column EmailDirection added |
| 2026-01-02 | EmailAttachmentInfo | Column _BilledSize removed |
| 2026-01-02 | EmailEvents | Column ForwardingInformation added |
| 2026-01-02 | EmailEvents | Column IsFirstContact added |
| 2026-01-02 | EmailEvents | Column EmailSize added |
| 2026-01-02 | EmailEvents | Column RecipientDomain added |
| 2026-01-02 | EmailEvents | Column ThreatClassification added |
| 2026-01-02 | EmailEvents | Column Cc added |
| 2026-01-02 | EmailEvents | Column To added |
| 2026-01-02 | EmailEvents | Column Context added |
| 2026-01-02 | MessageEvents | Table added to tracking |
| 2026-01-02 | EmailEvents | Column DistributionList added |
| 2026-01-02 | EmailEvents | Column ExchangeTransportRule added |
| 2026-01-02 | EmailAttachmentInfo | Column _IsBillable removed |
| 2026-01-02 | MessageUrlInfo | Table added to tracking |
| 2026-01-02 | DeviceInfo | Column OsBuildRevision added |
| 2026-01-02 | UrlClickEvents | Column _IsBillable removed |
| 2026-01-02 | EmailEvents | Column _BilledSize removed |
| 2026-01-02 | EntraIdSignInEvents | Table added to tracking |
| 2026-01-02 | AADSpnSignInEventsBeta | Table added to tracking |
| 2026-01-02 | ConnectorStatusInfo | Table added to tracking |
| 2026-01-02 | ExposureGraphEdges | Column MachineGroup removed |
| 2026-01-02 | ExposureGraphNodes | Column MachineGroup removed |
| 2026-01-02 | CloudStorageAggregatedEvents | Table added to tracking |
| 2026-01-02 | CloudProcessEvents | Table added to tracking |
| 2026-01-02 | DeviceTvmSoftwareVulnerabilitiesKB | Column EpssScore added |
| 2026-01-02 | DeviceTvmSoftwareVulnerabilities | Column AadDeviceId added |
| 2026-01-02 | MessagePostDeliveryEvents | Table added to tracking |
| 2026-01-02 | DisruptionAndResponseEvents | Table added to tracking |
| 2026-01-02 | DeviceEvents | Action type added: ExternalDeviceConnected |
| 2026-01-02 | DeviceInfo | Column FirmwareVersions added |
| 2026-01-02 | DeviceInfo | Column DiscoverySources added |
| 2026-01-02 | DeviceInfo | Column IsTransient added |
| 2026-01-02 | CampaignInfo | Table added to tracking |
| 2026-01-02 | FileMaliciousContentInfo | Table added to tracking |
| 2026-01-02 | UrlClickEvents | Column SourceId added |
| 2026-01-02 | UrlClickEvents | Column AppVersion added |
| 2026-01-02 | UrlClickEvents | Column AppName added |
| 2026-01-02 | UrlClickEvents | Column _BilledSize removed |
| 2026-01-02 | DeviceEvents | Action type added: ExternalDeviceDisconnected |
| 2026-01-02 | EmailEvents | Column _IsBillable removed |
| 2026-01-02 | AlertInfo | Column SentinelWorkspaceIds added |
| 2026-01-02 | CloudAppEvents | Column LastSeenForUser added |
| 2026-01-02 | IdentityInfo | Column State added |
| 2026-01-02 | IdentityInfo | Column RiskLevelDetails added |
| 2026-01-02 | IdentityInfo | Column RiskLevel added |
| 2026-01-02 | IdentityInfo | Column OtherMailAddresses added |
| 2026-01-02 | IdentityInfo | Column EmployeeId added |
| 2026-01-02 | IdentityInfo | Column DeletedDateTime added |
| 2026-01-02 | IdentityInfo | Column CompanyName added |
| 2026-01-02 | IdentityInfo | Column BlastRadius added |
| 2026-01-02 | IdentityInfo | Column ChangeSource added |
| 2026-01-02 | IdentityInfo | Column SourceProvider added |
| 2026-01-02 | IdentityInfo | Column Tags added |
| 2026-01-02 | IdentityInfo | Column CreatedDateTime added |
| 2026-01-02 | IdentityInfo | Column Manager added |
| 2026-01-02 | IdentityInfo | Column Address added |
| 2026-01-02 | IdentityInfo | Column DistinguishedName added |
| 2026-01-02 | IdentityInfo | Column CriticalityLevel added |
| 2026-01-02 | IdentityInfo | Column OnPremObjectId added |
| 2026-01-02 | IdentityInfo | Column IdentityId added |
| 2026-01-02 | IdentityInfo | Column ReportId added |
| 2026-01-02 | IdentityInfo | Column Timestamp added |
| 2026-01-02 | AlertEvidence | Column SentinelWorkspaceIds added |
| 2026-01-02 | EntraIdSpnSignInEvents | Table added to tracking |
| 2026-01-02 | IdentityInfo | Column Phone added |
| 2026-01-02 | AIAgentsInfo | Table added to tracking |
| 2026-01-02 | IdentityInfo | Column UserAccountControl added |
| 2026-01-02 | IdentityInfo | Column IdentityEnvironment added |
| 2026-01-02 | CloudAppEvents | Column UncommonForUser added |
| 2026-01-02 | CloudAppEvents | Column OAuthAppId added |
| 2026-01-02 | CloudAppEvents | Column AuditSource added |
| 2026-01-02 | CloudAppEvents | Column SessionData added |
| 2026-01-02 | CloudAppEvents | Column _BilledSize removed |
| 2026-01-02 | CloudAppEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityEvents | Table added to tracking |
| 2026-01-02 | IdentityDirectoryEvents | Column _BilledSize removed |
| 2026-01-02 | IdentityDirectoryEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityQueryEvents | Column _BilledSize removed |
| 2026-01-02 | IdentityInfo | Column SourceProviders added |
| 2026-01-02 | IdentityQueryEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityLogonEvents | Column UncommonForUser added |
| 2026-01-02 | IdentityLogonEvents | Column _BilledSize removed |
| 2026-01-02 | IdentityLogonEvents | Column _IsBillable removed |
| 2026-01-02 | IdentityAccountInfo | Table added to tracking |
| 2026-01-02 | IdentityInfo | Column TimeGenerated added |
| 2026-01-02 | IdentityInfo | Column TenantMembershipType added |
| 2026-01-02 | IdentityInfo | Column RiskStatus added |
| 2026-01-02 | IdentityInfo | Column GroupMembership added |
| 2026-01-02 | IdentityInfo | Column AssignedRoles added |
| 2026-01-02 | IdentityInfo | Column PrivilegedEntraPimRoles added |
| 2026-01-02 | IdentityLogonEvents | Column LastSeenForUser added |
| 2026-01-02 | GraphAPIAuditEvents | Table added to tracking |
| 2026-01-02 | AADSignInEventsBeta | Table added to tracking |
| 2026-01-02 | BehaviorEntities | Table added to tracking |
| 2026-01-02 | OfficeActivity | Column UniqueSharingId added |
| 2026-01-02 | OfficeActivity | Column SensitivityLabelId added |
| 2026-01-02 | OfficeActivity | Column ListItemUniqueId added |
| 2026-01-02 | OfficeActivity | Column MeetingDetailId added |
| 2026-01-02 | OfficeActivity | Column DeviceInformation added |
| 2026-01-02 | OfficeActivity | Column LeaveTime added |
| 2026-01-02 | OfficeActivity | Column JoinTime added |
| 2026-01-02 | OfficeActivity | Column IsJoinedFromLobby added |
| 2026-01-02 | OfficeActivity | Column ArtifactsShared added |
| 2026-01-02 | OfficeActivity | Column Attendees added |
| 2026-01-02 | OktaSystemLogs | Table added to tracking |
| 2026-01-02 | OfficeActivity | Column AppAccessContext added |
| 2026-01-02 | OfficeActivity | Column UniqueTokenId removed |
| 2026-01-02 | MicrosoftPurviewInformationProtection | Column AutoSensitivityLabelPolicyInfo added |
| 2026-01-02 | MicrosoftPurviewInformationProtection | Column SensitivityLabelEventFailureData added |
| 2026-01-02 | LLMActivity | Table added to tracking |
| 2026-01-02 | IlumioInsights | Table added to tracking |
| 2026-01-02 | GoogleWorkspaceReports | Table added to tracking |
| 2026-01-02 | GKEScheduler | Table added to tracking |
| 2026-01-02 | GKEHPADecision | Table added to tracking |
| 2026-01-02 | GKEControllerManager | Table added to tracking |
| 2026-01-02 | GKEAudit | Table added to tracking |
| 2026-01-02 | OfficeActivity | Column IssuedAtTime removed |
| 2026-01-02 | GKEApplication | Table added to tracking |
| 2026-01-02 | PowerBIActivity | Column FolderAccessRequests added |
| 2026-01-02 | PowerPlatformAdminActivity | Column EnvironmentId added |
| 2026-01-02 | SigninLogs | Table removed from tracking |
| 2026-01-02 | MicrosoftGraphActivityLogs | Table removed from tracking |
| 2026-01-02 | AzureMetrics | Table removed from tracking |
| 2026-01-02 | AzureDiagnostics | Table removed from tracking |
| 2026-01-02 | AuditLogs | Table removed from tracking |
| 2026-01-02 | AZKVPolicyEvaluationDetailsLogs | Table removed from tracking |
| 2026-01-02 | AZKVAuditLogs | Table removed from tracking |
| 2026-01-02 | AADUserRiskEvents | Table removed from tracking |
| 2026-01-02 | AADNonInteractiveUserSignInLogs | Table removed from tracking |
| 2026-01-02 | AADManagedIdentitySignInLogs | Table removed from tracking |
| 2026-01-02 | PowerPlatformAdminActivity | Column Properties added |
| 2026-01-02 | DeviceTvmHardwareFirmware | Table removed from tracking |
| 2026-01-02 | DeviceTvmBrowserExtensions | Table removed from tracking |
| 2026-01-02 | DeviceTvmCertificateInfo | Table removed from tracking |
| 2026-01-02 | DeviceBaselineComplianceProfiles | Table removed from tracking |
| 2026-01-02 | DeviceBaselineComplianceAssessmentKB | Table removed from tracking |
| 2026-01-02 | DeviceBaselineComplianceAssessment | Table removed from tracking |
| 2026-01-02 | ThreatIntelObjects | Column Source removed |
| 2026-01-02 | ThreatIntelIndicators | Column Source removed |
| 2026-01-02 | ThreatIntelExportOperation | Table added to tracking |
| 2026-01-02 | SentinelBehaviorInfo | Table added to tracking |
| 2026-01-02 | SentinelBehaviorEntities | Table added to tracking |
| 2026-01-02 | DeviceTvmBrowserExtensionsKB | Table removed from tracking |
| 2026-01-02 | BehaviorInfo | Table added to tracking |
| 2026-01-02 | GKEAPIServer | Table added to tracking |
| 2026-01-02 | GCPResourceManager | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsContainerInstanceId added |
| 2026-01-02 | AWSVPCFlow | Column EcsContainerInstanceArn added |
| 2026-01-02 | AWSVPCFlow | Column EcsClusterName added |
| 2026-01-02 | AWSVPCFlow | Column EcsClusterArn added |
| 2026-01-02 | AWSVPCFlow | Column Start added |
| 2026-01-02 | AWSSecurityHubFindings | Table added to tracking |
| 2026-01-02 | AWSS3ServerAccess | Table added to tracking |
| 2026-01-02 | AWSRoute53Resolver | Table added to tracking |
| 2026-01-02 | AWSNetworkFirewallTls | Table added to tracking |
| 2026-01-02 | AWSNetworkFirewallFlow | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsContainerId added |
| 2026-01-02 | AWSNetworkFirewallAlert | Table added to tracking |
| 2026-01-02 | AWSELBFlowLogs | Table added to tracking |
| 2026-01-02 | AWSCloudTrail | Column UserIdentityStoreArn added |
| 2026-01-02 | AWSCloudTrail | Column UserIdentityUserId added |
| 2026-01-02 | AWSALBAccessLogs | Table added to tracking |
| 2026-01-02 | ABAPUserDetails | Table added to tracking |
| 2026-01-02 | ABAPTableDataLog | Table added to tracking |
| 2026-01-02 | ABAPChangeDocsLog | Table added to tracking |
| 2026-01-02 | ABAPAuthorizationDetails | Table added to tracking |
| 2026-01-02 | ABAPAuditLog | Table added to tracking |
| 2026-01-02 | OAuthAppInfo | Table added to tracking |
| 2026-01-02 | AWSNLBAccessLogs | Table added to tracking |
| 2026-01-02 | GCPVPCFlow | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsSecondContainerId added |
| 2026-01-02 | AWSVPCFlow | Column EcsTaskDefinitionArn added |
| 2026-01-02 | GCPNATAudit | Table added to tracking |
| 2026-01-02 | GCPNAT | Table added to tracking |
| 2026-01-02 | GCPMonitoring | Table added to tracking |
| 2026-01-02 | GCPLoadBalancer | Table added to tracking |
| 2026-01-02 | GCPIDS | Table added to tracking |
| 2026-01-02 | GCPIAM | Table added to tracking |
| 2026-01-02 | GCPFirewallLogs | Table added to tracking |
| 2026-01-02 | GCPDNS | Table added to tracking |
| 2026-01-02 | GCPComputeEngine | Table added to tracking |
| 2026-01-02 | GCPCloudSQL | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsServiceName added |
| 2026-01-02 | GCPCloudRun | Table added to tracking |
| 2026-01-02 | GCPApigee | Table added to tracking |
| 2026-01-02 | CrowdStrikeVulnerabilities | Table added to tracking |
| 2026-01-02 | CrowdStrikeIncidents | Table added to tracking |
| 2026-01-02 | CrowdStrikeHosts | Table added to tracking |
| 2026-01-02 | CrowdStrikeDetections | Table added to tracking |
| 2026-01-02 | CrowdStrikeAlerts | Table added to tracking |
| 2026-01-02 | CommunicationComplianceActivity | Table added to tracking |
| 2026-01-02 | AggregatedSecurityAlert | Table added to tracking |
| 2026-01-02 | AWSVPCFlow | Column EcsTaskId added |
| 2026-01-02 | AWSVPCFlow | Column EcsTaskArn added |
| 2026-01-02 | GCPCDN | Table added to tracking |
| 2024-10-19 | AZKVPolicyEvaluationDetailsLogs | Table added to tracking |
| 2024-10-19 | AZKVAuditLogs | Table added to tracking |
| 2024-10-19 | AzureMetrics | Table added to tracking |
| 2024-10-19 | AzureDiagnostics | Table added to tracking |
| 2024-10-18 | IdentityInfo | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareInventory | Table added to tracking |
| 2024-10-18 | DeviceTvmCertificateInfo | Table added to tracking |
| 2024-10-18 | DeviceTvmInfoGathering | Table added to tracking |
| 2024-10-18 | DeviceTvmInfoGatheringKB | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareEvidenceBeta | Table added to tracking |
| 2024-10-18 | DeviceTvmBrowserExtensions | Table added to tracking |
| 2024-10-18 | DeviceTvmBrowserExtensionsKB | Table added to tracking |
| 2024-10-18 | DeviceTvmHardwareFirmware | Table added to tracking |
| 2024-10-18 | CloudAuditEvents | Table added to tracking |
| 2024-10-18 | ExposureGraphNodes | Table added to tracking |
| 2024-10-18 | ExposureGraphEdges | Table added to tracking |
| 2024-10-18 | AADManagedIdentitySignInLogs | Table added to tracking |
| 2024-10-18 | AADNonInteractiveUserSignInLogs | Table added to tracking |
| 2024-10-18 | AADUserRiskEvents | Table added to tracking |
| 2024-10-18 | ASimAuditEventLogs | Table added to tracking |
| 2024-10-18 | ASimAuthenticationEventLogs | Table added to tracking |
| 2024-10-18 | ASimDhcpEventLogs | Table added to tracking |
| 2024-10-18 | ASimDnsActivityLogs | Table added to tracking |
| 2024-10-18 | ASimFileEventLogs | Table added to tracking |
| 2024-10-18 | ASimNetworkSessionLogs | Table added to tracking |
| 2024-10-18 | ASimProcessEventLogs | Table added to tracking |
| 2024-10-18 | DeviceBaselineComplianceProfiles | Table added to tracking |
| 2024-10-18 | DeviceBaselineComplianceAssessmentKB | Table added to tracking |
| 2024-10-18 | DeviceBaselineComplianceAssessment | Table added to tracking |
| 2024-10-18 | ASimRegistryEventLogs | Table added to tracking |
| 2024-10-18 | IdentityLogonEvents | Table added to tracking |
| 2024-10-18 | IdentityQueryEvents | Table added to tracking |
| 2024-10-18 | IdentityDirectoryEvents | Table added to tracking |
| 2024-10-18 | CloudAppEvents | Table added to tracking |
| 2024-10-18 | EmailEvents | Table added to tracking |
| 2024-10-18 | EmailAttachmentInfo | Table added to tracking |
| 2024-10-18 | EmailUrlInfo | Table added to tracking |
| 2024-10-18 | EmailPostDeliveryEvents | Table added to tracking |
| 2024-10-18 | UrlClickEvents | Table added to tracking |
| 2024-10-18 | DeviceInfo | Table added to tracking |
| 2024-10-18 | AlertEvidence | Table added to tracking |
| 2024-10-18 | DeviceNetworkInfo | Table added to tracking |
| 2024-10-18 | DeviceNetworkEvents | Table added to tracking |
| 2024-10-18 | DeviceFileEvents | Table added to tracking |
| 2024-10-18 | DeviceRegistryEvents | Table added to tracking |
| 2024-10-18 | DeviceLogonEvents | Table added to tracking |
| 2024-10-18 | DeviceImageLoadEvents | Table added to tracking |
| 2024-10-18 | DeviceEvents | Table added to tracking |
| 2024-10-18 | DeviceFileCertificateInfo | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareVulnerabilities | Table added to tracking |
| 2024-10-18 | DeviceTvmSoftwareVulnerabilitiesKB | Table added to tracking |
| 2024-10-18 | DeviceTvmSecureConfigurationAssessment | Table added to tracking |
| 2024-10-18 | DeviceProcessEvents | Table added to tracking |
| 2024-10-18 | DeviceTvmSecureConfigurationAssessmentKB | Table added to tracking |
| 2024-10-18 | ASimUserManagementActivityLogs | Table added to tracking |
| 2024-10-18 | AWSCloudTrail | Table added to tracking |
| 2024-10-18 | OfficeActivity | Table added to tracking |
| 2024-10-18 | Operation | Table added to tracking |
| 2024-10-18 | PowerAppsActivity | Table added to tracking |
| 2024-10-18 | PowerAutomateActivity | Table added to tracking |
| 2024-10-18 | PowerBIActivity | Table added to tracking |
| 2024-10-18 | PowerPlatformAdminActivity | Table added to tracking |
| 2024-10-18 | PowerPlatformConnectorActivity | Table added to tracking |
| 2024-10-18 | PowerPlatformDlpActivity | Table added to tracking |
| 2024-10-18 | ProjectActivity | Table added to tracking |
| 2024-10-18 | SecurityEvent | Table added to tracking |
| 2024-10-18 | NetworkSessions | Table added to tracking |
| 2024-10-18 | SecurityIncident | Table added to tracking |
| 2024-10-18 | SentinelHealth | Table added to tracking |
| 2024-10-18 | SigninLogs | Table added to tracking |
| 2024-10-18 | ThreatIntelIndicators | Table added to tracking |
| 2024-10-18 | ThreatIntelObjects | Table added to tracking |
| 2024-10-18 | ThreatIntelligenceIndicator | Table added to tracking |
| 2024-10-18 | Usage | Table added to tracking |
| 2024-10-18 | UserAccessAnalytics | Table added to tracking |
| 2024-10-18 | UserPeerAnalytics | Table added to tracking |
| 2024-10-18 | Watchlist | Table added to tracking |
| 2024-10-18 | WindowsEvent | Table added to tracking |
| 2024-10-18 | SentinelAudit | Table added to tracking |
| 2024-10-18 | MicrosoftPurviewInformationProtection | Table added to tracking |
| 2024-10-18 | MicrosoftGraphActivityLogs | Table added to tracking |
| 2024-10-18 | McasShadowItReporting | Table added to tracking |
| 2024-10-18 | AWSCloudWatch | Table added to tracking |
| 2024-10-18 | AWSGuardDuty | Table added to tracking |
| 2024-10-18 | AWSVPCFlow | Table added to tracking |
| 2024-10-18 | AWSWAF | Table added to tracking |
| 2024-10-18 | Alert | Table added to tracking |
| 2024-10-18 | Anomalies | Table added to tracking |
| 2024-10-18 | AppCenterError | Table added to tracking |
| 2024-10-18 | AuditLogs | Table added to tracking |
| 2024-10-18 | AzureActivity | Table added to tracking |
| 2024-10-18 | BehaviorAnalytics | Table added to tracking |
| 2024-10-18 | CommonSecurityLog | Table added to tracking |
| 2024-10-18 | ComputerGroup | Table added to tracking |
| 2024-10-18 | ConfidentialWatchlist | Table added to tracking |
| 2024-10-18 | DataverseActivity | Table added to tracking |
| 2024-10-18 | DnsAuditEvents | Table added to tracking |
| 2024-10-18 | DnsEvents | Table added to tracking |
| 2024-10-18 | DnsInventory | Table added to tracking |
| 2024-10-18 | DynamicSummary | Table added to tracking |
| 2024-10-18 | Dynamics365Activity | Table added to tracking |
| 2024-10-18 | GCPAuditLogs | Table added to tracking |
| 2024-10-18 | GoogleCloudSCC | Table added to tracking |
| 2024-10-18 | HuntingBookmark | Table added to tracking |
| 2024-10-18 | LinuxAuditLog | Table added to tracking |
| 2024-10-18 | ASimWebSessionLogs | Table added to tracking |
| 2024-10-18 | AlertInfo | Table added to tracking |