Forum Discussion
KQL query to check tri.sensor for MDI
The Advanced Hunting tables contain security related data from your environment. They don't contain details on your deployment status.
You can use the portal for that, see the sensors page and the health issues page.
Also, we are working on public APIs that you could use to get this information (and much more). But these are several months away from GA.
- zlate81Apr 09, 2025Copper Contributor
Hi, now it's been a few years and I was wondering what's available today in regard to Defender for identity sensor health and Advance hunting tables?
Maybe there has been any added command that can be leveraged to fetch this kind of info like arg() and so on.Thanks!
- Martin_SchvartzmanApr 14, 2025
Microsoft
zlate81 You can use the sensor and healthIssues Graph APIs to pull and manage the sensors and health issues.
See these for more details: