Forum Discussion
Microsoft Defender - Advanced Hunting API
Hello! I am looking into utilizing the Advanced Hunting API to search for emails sent by a specific IP / sender / sender domain. Within the Advanced Hunting console, I am able to carry out the fo...
I am having this exact same issues when trying the query 'EmailAttachmentInfo | limit 10' I get a 400 but if i change the query to 'DeviceRegistryEvents | limit 10' the script runs ok.
Odd thing is in Defender I cant see the schema DeviceRegistryEvents.
DId you ever find a fix, is it permissions related?
- Any resolution to this issue?
