M365D_table
Microsoft Defender 365 Advanced hunting full schema reference (Streaming API overview) MS 365 Advanced hunting schema tables reference MS 365 Defender/Azure Sentinel detections/custom KQL querries Table Schema: Acronym Product MS365D Microsoft 365 Defender MDI Microsoft Defender for Identity MDE Microsoft Defender for Endpoint MDA Microsoft Defender for Cloud Apps