In advanced hunting, Microsoft Defender portal users can now use the adx() operator to query tables stored in Azure Data Explorer
In advanced hunting, Microsoft Defender portal users can now use the adx() operator to query tables stored in Azure Data Explorer. You no longer need to go to log analytics in Microsoft Sentinel to use this operator if you're already in Microsoft Defender.
Terms in this update
This is in the weekly digest for week 40 · What changed this week? →
More Defender XDR updates
Identity Security dashboard and Coverage & Maturity
Integrated Security Operations Center (ISOC) in Microsoft Defender
AI agent posture risk in Microsoft Defender
Real-time protection for Microsoft Agent 365 tooling servers
The Domain investigation page allows you to investigate an Active Directory domain
Threat detection for Microsoft Agent 365 agents
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
