Forum Discussion

SergioT1228's avatar
SergioT1228
Brass Contributor
Nov 12, 2022

KQL query to check tri.sensor for MDI

I was looking for a query to run to check that all the deployed MDI sensor's are running successfully.  I have reviewed the 3 Identity tables listed within the Monitor > Logs table schema but unable ...
zlate81's avatar
zlate81
Copper Contributor
Apr 09, 2025

Martin_Schvartzman 

Hi, now it's been a few years and I was wondering what's available today in regard to Defender for identity sensor health and Advance hunting tables?
Maybe there has been any added command that can be leveraged to fetch this kind of info like arg() and so on.

Thanks! 

Resources