Microsoft Defender XDR
Hunting and detection

AADSignInEventsBeta table in the advanced hunting schema (deprecated)

In brief

The documentation now labels AADSignInEventsBeta as deprecated and states that it will be replaced by EntraIdSignInEvents. Queries using the table will be migrated automatically on that date.

What Defender admins need to know

Administrators should account for the automatic transition in queries and reporting that use AADSignInEventsBeta.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

AADSignInEventsBeta (deprecated)