Forum Discussion
On Advanced hunting, two schema related to AAD sign-in stopped returning results suddenly
When we implemented Defender for Endpoint (Defender ATP at that time), we got query results from the following two schema on Advanced hunting as expected. AADSignInEventsBeta AADSpnSignInEventsBet...
I've come back to add a comment to myself.
The problem is solved. I found AADSignInEventsBeta returns logs again on our tenant.
In last Oct, MSFT Japan support told us that this schema is already migrated to IdentityLogonEvents on our tenant. But their reply turned out to be false.
I have no idea about what happened to our tenant for these four months...
The problem is solved. I found AADSignInEventsBeta returns logs again on our tenant.
In last Oct, MSFT Japan support told us that this schema is already migrated to IdentityLogonEvents on our tenant. But their reply turned out to be false.
I have no idea about what happened to our tenant for these four months...