Microsoft Defender XDR
Hunting and detectionAdvanced Hunting Clouddnsevents Table
In brief
The table documentation now describes ImageDigest, Region, and HostName, including their meanings for container image, cluster region, and node hostname data.
What Defender admins need to know
Administrators can use these documented fields when reviewing or querying CloudDnsEvents data.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| DnsResponseCodeName | string | The DNS response code name as defined by the Internet Assigned Numbers Authority (IANA). |
| DnsNetworkDuration | long | The DNS request duration in milliseconds |
| TransactionIdHex | string | The DNS unique hex transaction ID |
| ImageDigest | string | The container's image digest |
| Region | string | The geographical region where the cluster is located |
| HostName | string | The node's hostname |
| AdditionalFields | dynamic | Additional information about the entity or event |
Sample query
@@ -58,6 +58,9 @@ For information on other tables in the advanced hunting schema, see [advanced hu | `DnsResponseCodeName` | `string` | The DNS response code name as defined by the Internet Assigned Numbers Authority (IANA). | | `DnsNetworkDuration` | `long` | The DNS request duration in milliseconds | | `TransactionIdHex` | `string` | The DNS unique hex transaction ID |+| `ImageDigest` | `string` | The container's image digest |+| `Region` | `string` | The geographical region where the cluster is located |+| `HostName` | `string` | The node's hostname | | `AdditionalFields` | `dynamic` | Additional information about the entity or event | ## Sample query