Forum Discussion

Copper Contributor

Jan 20, 2026

Where can I get the latest info on Advanced Hunting Table Retirement

First question - where can I find the latest info on the deprecation of advanced hunting tables? Background - I was developing some detections and as I was trying to decide on which table I should u...

investigation

microsoft defender for endpoint

threat hunting

GoXATAKAN

Brass Contributor

Jan 23, 2026

AADSignInEventsBeta is not retired yet. It is still actively ingesting data, which is expected.

EntraIdSignInEvents is the GA replacement for AADSignInEventsBeta. Both tables coexist until December 9, 2025, after which AADSignInEventsBeta will be deprecated. Until that date, seeing current data in AADSignInEventsBeta is normal.

Microsoft-managed and custom scheduled detections will be updated automatically, but manual Advanced Hunting queries, workbooks, and API queries must be updated by customers to use EntraIdSignInEvents.

Latest and authoritative updates on Advanced Hunting table deprecations can be tracked in:

Microsoft Defender XDR :

Table schema pages (banner notices)

Microsoft 365 Message Center announcements

Recommendation: Use EntraIdSignInEvents for all new queries and migrate existing queries before December 9, 2025.