Forum Discussion
Microsoft 365 defender
In which table does the microsoft 365 defender logs are stored in logs of Microsoft Sentinel?
I find the easiest way to identify the table for a log source is to open the data connectors blade.
Depending on what you're looking for, my guess is you're looking for the SecurityAlert table.
Note that with the new data connector for O365 Defender you'll probably want to enable synchronization of incidents:
