With the https://securitycenter.windows.com/hunting on Windows Defender Advanced Threat Protection, you have even more powerful tools for successfully tracking and identifying advanced persistent thr...
Updated Sep 16, 2020
Version 6.0
Blog Post
Liza,
This uses the new Log Analytics query language - but can we do things like:
- Use Microsoft Flow to schedule queries
- Can we save the output of queries to some persistent storage - right now we can manually click on Export to Excel
- Can Log Analytics or PowerBI connect to the hunting data (The current PowerBI dashboard for Defender ATP seems to be focused on raised alerts - the data set doesn't seem to show the full hunting data)
So far this looks very useful.
-Neil
Where do we post feedback and/or bugs with Advanced Hunting? Uservoice?
I have had a number of odd glitches with the "Export to Excel" after running a saved query.
Thanks!