Microsoft Defender XDR
Hunting and detectionAdvanced Hunting Devicebaselinecomplianceassessment Table
In brief
The Advanced Hunting schema now describes ConfigurationId as identifying a configuration within a specific benchmark and benchmark version.
What Defender admins need to know
No administrator action is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| DeviceName | string | Fully qualified domain name (FQDN) of the device |
| OSPlatform | string | Platform of the operating system running on the device. This indicates specific operating systems, including variations within the same family, such as Windows 11, Windows 10 and Windows 7. |
| OSVersion | string | Version of the operating system running on the device |
| ConfigurationId | string | Unique identifierIdentifier for a configuration within a specific configurationbenchmark and benchmark version |
| ProfileId | string | Unique identifier for the profile |
| IsCompliant | nullable bool | Indicates whether the device that initiated the event is compliant or not |
| IsApplicable | boolean | Indicates whether the configuration or policy is applicable |
@@ -43,7 +43,7 @@ For information on other tables in the advanced hunting schema, see [the advance | `DeviceName` | `string` | Fully qualified domain name (FQDN) of the device | | `OSPlatform` | `string` | Platform of the operating system running on the device. This indicates specific operating systems, including variations within the same family, such as Windows 11, Windows 10 and Windows 7. | | `OSVersion` | `string` | Version of the operating system running on the device |-| `ConfigurationId` | `string` | Unique identifier for a specific configuration |+| `ConfigurationId` | `string` | Identifier for a configuration within a specific benchmark and benchmark version | | `ProfileId` | `string` | Unique identifier for the profile | | `IsCompliant` | `nullable bool` | Indicates whether the device that initiated the event is compliant or not | | `IsApplicable` | `boolean` | Indicates whether the configuration or policy is applicable |