Forum Discussion
GuidoImpe
Dec 09, 2025Brass Contributor
Custom Data Collection - Not Collect Events
Hello,
Have anyone test or implement Custom Data Collection from Defender XDR ?
I try to use this function, i create rule and attach Sentinel Workspace, but for Example the "DeviceCustomProcessEvents" Table remains empty.
But with comand "DeviceProcessEvents" there are events that match the rule that i create.
There is another person that have the same issues ?
Many thanks,
Regards,
Guido
No RepliesBe the first to reply