Advanced hunting tables

Copper Contributor

I work for a MSSP and when I compare the customers I see a discrepancy, some tables that I expect to be a part of the basic "Defender for Endpoint" are not there.

 

For example DeviceProcessEvents and DeviceEvents I expect to be found on all customers even if they have the most basic license.

 

In a bigger picture it would be great to get info on what tables gets added to the Advanced hunting depending on what license you have.

 

 

0 Replies