Forum Discussion

Copper Contributor

Feb 24, 2023

Solved

EmailEvents table is empty

Hi , I have noticed the EmailEvents table is empty in Microsoft sentinel > Logs > EmailEvents I have defender for business licensing, believe this has similar features to defender 365 P1 , ...

KQL

kusto

Log Data

microsoft defender for endpoint

microsoft defender for office 365

threat hunting

Clive_Watson
Feb 24, 2023
Please see https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/advanced-hunting-surfacing-more-email-data-from-microsoft/ba-p/2678118 - P2 is required.

Clive_Watson

Bronze Contributor

Feb 24, 2023

Please see https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/advanced-hunting-surfacing-more-email-data-from-microsoft/ba-p/2678118 - P2 is required.

DanuN123
Copper Contributor
Feb 24, 2023
Thanks 🙂