Forum Discussion

GuidoImpe's avatar
GuidoImpe
Brass Contributor
Dec 09, 2025
Solved

Custom Data Collection - Not Collect Events

Hello, 

Have anyone test or implement Custom Data Collection from Defender XDR ?

I try to use this function, i create rule and attach Sentinel Workspace, but for Example the "DeviceCustomProcessEvents" Table remains empty.

But with comand "DeviceProcessEvents" there are events that match the rule that i create.

There is another person that have the same issues ?

Many thanks,

Regards,

Guido

  • I resolved, try to use table DeviceNetworksCustomProcess on other Endpoint and all works fine

1 Reply

  • GuidoImpe's avatar
    GuidoImpe
    Brass Contributor

    I resolved, try to use table DeviceNetworksCustomProcess on other Endpoint and all works fine

Resources