We are happy to announce the availability of a new data source in Microsoft 365 Defender Advanced Hunting.
We have just enabled streaming of Azure Active Directory audit logs into Advanced Hunting,...
Updated Dec 17, 2020
Version 2.0
Blog Post
2 MIN READ
Azure Active Directory audit logs now available in Advanced Hunting (public preview)
Has the log flow been changed since this article is publicated? I can't find many events in the CloudAppEvents but there are two new tables tagged BETA for AAD authentication events.