Microsoft Sentinel
Cloud and workloadsDomain Based Essential Solutions
In brief
The page date was updated, and the description of the ASIM schemas used by essential solutions was simplified.
What Defender admins need to know
Administrators get clearer guidance on the ASIM schemas associated with these solutions; no action is stated.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
ASIM schemas supported
The essentialsessential solutions are currently spanned acrossuse the following different ASIM schemas that Sentinel supports:schemas:
- Audit event
- Authentication event
@@ -5,7 +5,7 @@ ms.author: edbaynash author: EdB-MSFT ms.reviewer: krishsa ms.topic: concept-article-ms.date: 03/01/2024+ms.date: 08/07/2026 appliesto: - Microsoft Sentinel in the Microsoft Defender portal - Microsoft Sentinel in the Azure portal@@ -42,7 +42,7 @@ You might consider Microsoft essential solutions for the following reasons: ## ASIM schemas supported -The essentials solutions are currently spanned across the following different ASIM schemas that Sentinel supports:+The essential solutions currently use the following ASIM schemas: - Audit event - Authentication event