The following advanced hunting schema tables are now generally available:

  • The DisruptionAndResponseEvents table contains information about automatic attack disruption events in Microsoft Defender XDR.
  • The CloudAuditEvents table contains information about cloud audit events for various cloud platforms protected by the organization's Microsoft Defender for Cloud.
  • The CloudDnsEvents table contains information about DNS activity events from cloud infrastructure environments.
  • The CloudProcessEvents table contains information about process events in multicloud hosted environments.