Forum Discussion

GuidoImpe's avatar
GuidoImpe
Brass Contributor
Dec 09, 2025

Custom Data Collection - Not Collect Events

Hello, 

Have anyone test or implement Custom Data Collection from Defender XDR ?

I try to use this function, i create rule and attach Sentinel Workspace, but for Example the "DeviceCustomProcessEvents" Table remains empty.

But with comand "DeviceProcessEvents" there are events that match the rule that i create.

There is another person that have the same issues ?

Many thanks,

Regards,

Guido

No RepliesBe the first to reply

Resources