The following advanced hunting schema tables are now available for preview to help you look through Microsoft Teams events and related information:

  • The MessageEvents table contains details about messages sent and received within your organization at the time of delivery
  • The MessagePostDeliveryEvents table contains information about security events that occurred after the delivery of a Microsoft Teams message in your organization
  • The MessageUrlInfo table contains information about URLs sent through Microsoft Teams messages in your organization