Forum Discussion

Sreenath15's avatar
Sreenath15
Copper Contributor
Feb 18, 2025
Solved

DeviceRegistryEvents table

Couldn’t find any documentation on what is logged or not logged in this table. Is there any documentation available on what registry entries are logged by defender? Is there a way to suggest some reg...
microsoft defender for endpoint
Search
threat hunting
  • luchete's avatar
    luchete
    Feb 20, 2025

    Hi Sreenath15,

    Unfortunately, there's no detailed public documentation on the specific registry entries logged by Defender in the DeviceRegistryEvents table. Microsoft doesn’t provide a full list, but it mainly logs registry changes related to security events. If you'd like to suggest registry events to be logged, you can submit feedback through the Microsoft Feedback portal or use the "Send a suggestion" option in the Defender portal. They review suggestions for future updates.

luchete's avatar
luchete
Iron Contributor
Feb 20, 2025

Hi Sreenath15,

Unfortunately, there's no detailed public documentation on the specific registry entries logged by Defender in the DeviceRegistryEvents table. Microsoft doesn’t provide a full list, but it mainly logs registry changes related to security events. If you'd like to suggest registry events to be logged, you can submit feedback through the Microsoft Feedback portal or use the "Send a suggestion" option in the Defender portal. They review suggestions for future updates.

Resources