Blog Post

Microsoft Sentinel Blog

5 MIN READ

What's New: 80 out of the box hunting queries!

Microsoft

Dec 07, 2020

This installment is part of a broader series to keep you up to date with the latest features in Azure Sentinel. The installments will be bite-sized to enable you to easily digest the new content. ...

Updated Nov 02, 2021

Version 8.0

Microsoft

Joined October 16, 2017

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.

Nexxic

Copper Contributor

Dec 08, 2020

Looks awesome!
For some reason I don't have the TeamsData table, even though Teams (Preview) is successfully integrated from the Office365 Data connector.

The following query works without any issues.

OfficeActivity
| where OfficeWorkload == "MicrosoftTeams"

Any idea why this could be?