Forum Discussion
Where can I get the latest info on Advanced Hunting Table Retirement
The confusion is understandable. AADSignInEventsBeta is not retired yet, which is why you are still seeing current data being ingested into that table. It will continue ingesting data until the official deprecation date of December 9, 2025.
EntraIdSignInEvents is the General Availability (GA) replacement for AADSignInEventsBeta. The change mainly reflects the removal of preview status and alignment with Microsoft Entra branding. Both tables coexist during the transition period, and this coexistence is expected behavior.
Microsoft-managed detections and custom scheduled detections will be updated automatically by Microsoft. However, any manual Advanced Hunting queries, workbooks, API integrations, or external SIEM queries must be updated by customers to reference EntraIdSignInEvents instead of AADSignInEventsBeta.
For the latest and authoritative information about Advanced Hunting table deprecations, the best sources are the official table schema documentation pages (where banner notices are typically updated first), Microsoft 365 Message Center announcements, Microsoft Defender XDR release notes, and the “What’s new in Microsoft Defender XDR” documentation.
If you are developing new detections, you should use EntraIdSignInEvents moving forward and begin migrating any existing queries before the December 9, 2025 deadline to avoid disruption.