Sep 01 2024 01:40 PM
Is there a roadmap for this: consolidate all sign-in schema information into the IdentityLogonEvents table.
This is with respect to AADSignInEventsBeta & AADSpnSignInEventsBeta being offered on a short-term basis to allow you to hunt through Microsoft Entra sign-in events.
AADSignInEventsBeta table in the advanced hunting schema - Microsoft Defender XDR | Microsoft Learn
Sep 27 2024 06:50 AM