Jan 24 2024 03:49 AM - edited Jan 24 2024 04:05 AM
Hi,
I have a little problem with the customer I am working with. We need to have access to UrlClickedEvents in advanced hunting but we can not see it.
I am using Security Operator and Security Reader Entra Built in Roles.
This is not licensing problem and there is a running MDO in clients environment. There were alerts related to url clicked events so it is not due to the fact that the table is not populated. I have tried adding the same roles in my environment and it gave me the access to this table. What else can i do to get acess to this table?
I have two running policies in safe links. First is basic protection and second is configured as followed:
Edit:
There is a URL clicked tab in explorer for MDO, so I have no idea why this table is not available:
Jan 31 2024 04:04 AM
@kmajchrzak that's a tough one, indeed since you have access to Advanced Hunting you should be able to access the UrlClickEvents table as it refers to P2 MDO license.
Be that as it may, I would reach out to Support for this. In the meantime, if you get a reply back, please let us know what the issue was.