Advanced hunting tables

Copper Contributor

I work for a MSSP and when I compare the customers I see a discrepancy, some tables that I expect to be a part of the basic "Defender for Endpoint" are not there.


For example DeviceProcessEvents and DeviceEvents I expect to be found on all customers even if they have the most basic license.


In a bigger picture it would be great to get info on what tables gets added to the Advanced hunting depending on what license you have.



0 Replies