KQL Jobs, Summary Rules, and Search Jobs
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs-summary-rules-search-jobs.md.
Cross-product topic
Hunting and detection
A cross-product view of Microsoft Defender changes related to Hunting and detection.
Latest Hunting and detection changes
Review and Remove Unnecessary Allowlist Entries with Advanced Hunting in Microsoft Defender for Office 365
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/review-allow-entries.md.
Sample KQL Queries for Microsoft Sentinel Data Lake
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-sample-queries.md.
Threat Explorer Threat Hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/threat-explorer-threat-hunting.md.
Troubleshoot KQL Queries for the Data Lake
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-troubleshoot.md.
Add Advanced Hunting community queries to Microsoft Defender and Microsoft Sentinel
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/add-advanced-hunting-community-queries.md.
Review and remove unnecessary allowlist entries with Advanced Hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/review-allow-entries.md.
Advanced Hunting Cloudpolicyenforcementevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-cloudpolicyenforcementevents-table.md.
Advanced Hunting Cloudprocessevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-cloudprocessevents-table.md.
Advanced Hunting Cloudstorageaggregatedevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-cloudstorageaggregatedevents-table.md.
Advanced Hunting Custom Functions
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-custom-functions.md.
Advanced Hunting Datasecuritybehaviors Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-datasecuritybehaviors-table.md.
Advanced Hunting Datasecurityevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-datasecurityevents-table.md.
Advanced Hunting Defender Results
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-results.md.
Advanced Hunting Defender Use Custom Rules
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-use-custom-rules.md.
Advanced Hunting Devicebaselinecomplianceassessment Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicebaselinecomplianceassessment-table.md.
Advanced Hunting Devicebaselinecomplianceassessmentkb Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicebaselinecomplianceassessmentkb-table.md.
Advanced Hunting Devicebaselinecomplianceprofiles Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicebaselinecomplianceprofiles-table.md.
Advanced Hunting Deviceevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceevents-table.md.
Advanced Hunting Devicefilecertificateinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicefilecertificateinfo-table.md.
Advanced Hunting Devicefileevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicefileevents-table.md.
Advanced Hunting Deviceimageloadevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceimageloadevents-table.md.
Advanced Hunting Deviceinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceinfo-table.md.
Advanced Hunting Devicelogonevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicelogonevents-table.md.
Advanced Hunting Devicenetworkevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicenetworkevents-table.md.
Advanced Hunting Devicenetworkinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicenetworkinfo-table.md.
Advanced Hunting Deviceprocessevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceprocessevents-table.md.
Advanced Hunting Devicetvmbrowserextensions Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmbrowserextensions-table.md.
Advanced Hunting Devicetvmbrowserextensionskb Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmbrowserextensionskb-table.md.
Advanced Hunting Devicetvmcertificateinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmcertificateinfo-table.md.
Advanced Hunting Devicetvminfogathering Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvminfogathering-table.md.
Advanced Hunting Devicetvminfogatheringkb Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvminfogatheringkb-table.md.
Advanced Hunting Devicetvmsecureconfigurationassessment Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmsecureconfigurationassessment-table.md.
Advanced Hunting Devicetvmsoftwareevidencebeta Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmsoftwareevidencebeta-table.md.
Advanced Hunting Devicetvmsoftwareinventory Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmsoftwareinventory-table.md.
Advanced Hunting Devicetvmsoftwarevulnerabilities Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md.
Advanced Hunting Devicetvmsoftwarevulnerabilitieskb Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md.
Advanced Hunting Errors
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-errors.md.
Advanced Hunting Expert Training
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-expert-training.md.
Advanced Hunting Exposuregraphedges Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-exposuregraphedges-table.md.
Advanced Hunting Exposuregraphnodes Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-exposuregraphnodes-table.md.
Advanced Hunting Filemaliciouscontentinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-filemaliciouscontentinfo-table.md.
Advanced Hunting Find Ransomware
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-find-ransomware.md.
Advanced Hunting Go Hunt
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-go-hunt.md.
Advanced Hunting Graph
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-graph.md.
Advanced Hunting Identitydirectoryevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-identitydirectoryevents-table.md.
Advanced Hunting Identityevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-identityevents-table.md.
Advanced Hunting Identityinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-identityinfo-table.md.
Advanced Hunting Identitylogonevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-identitylogonevents-table.md.
Advanced Hunting Messageevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-messageevents-table.md.
Advanced Hunting Messagepostdeliveryevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-messagepostdeliveryevents-table.md.
Advanced Hunting Messageurlinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-messageurlinfo-table.md.
Advanced Hunting Microsoft Defender
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-microsoft-defender.md.
Advanced Hunting Migrate From Mde
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-migrate-from-mde.md.
Advanced Hunting Overview
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-overview.md.
Advanced Hunting Query Emails Devices
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-emails-devices.md.
Advanced Hunting Query Language
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-language.md.
Advanced Hunting Query Results
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-results.md.
Advanced Hunting Schema Changes
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-schema-changes.md.
Advanced Hunting Shared Queries
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-shared-queries.md.
Advanced Hunting Take Action
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Advanced Hunting Urlclickevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-urlclickevents-table.md.
Api Advanced Hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/api-advanced-hunting.md.
Before you begin using the Microsoft Defender Experts Hunting service
Hunting and detection
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-prerequisites.md.
Create custom hunting queries in Microsoft Sentinel
Hunting and detection
Updated Microsoft Defender documentation in sentinel/hunts-custom-queries.md.
Custom Detection Manage
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/custom-detection-manage.md.
Custom Detection Rules
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Defender Experts For Hunting
Hunting and detection
Removed Microsoft Defender documentation in defender-xdr/defender-experts-for-hunting.md.
DeviceTvmHardwareFirmware table in the advanced hunting schema
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicetvmhardwarefirmware-table.md.
Faq Defender Experts Hunting
Hunting and detection
Removed Microsoft Defender documentation in defender-xdr/faq-defender-experts-hunting.md.
FAQs related to Microsoft Defender Experts Hunting service
Hunting and detection
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-faq.md.
Hunting capabilities in Microsoft Sentinel
Hunting and detection
Updated Microsoft Defender documentation in sentinel/hunting.md.
Manage hunting queries in Microsoft Sentinel using REST API
Hunting and detection
Updated Microsoft Defender documentation in sentinel/hunting-with-rest-api.md.
Onboarding Defender Experts For Hunting
Hunting and detection
Removed Microsoft Defender documentation in defender-xdr/onboarding-defender-experts-for-hunting.md.
Subscribe to Microsoft Defender Experts Hunting
Hunting and detection
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-onboarding.md.
Threat hunting in Threat Explorer and Real-time detections in Microsoft Defender for Office 365
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/threat-explorer-threat-hunting.md.
Understand the Defender Experts Hunting report in Microsoft Defender
Hunting and detection
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-report.md.
What is Microsoft Defender Experts Hunting offering
Hunting and detection
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-overview.md.
Upcoming change to Microsoft Defender for Endpoint Advanced Hunting: removal of SMB signature data
Hunting and detection
Starting July 13, 2026, Microsoft Defender for Endpoint will remove SMB signature inspection events from Advanced Hunting to improve performance. Queries using these events will stop working; users should update them to filter SMB traffic by port 445 in DeviceNetworkEvents before July 1, 2026.
Advanced Hunting Microsoft Defender
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-microsoft-defender.md.
Advanced Hunting Emailattachmentinfo Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-emailattachmentinfo-table.md.
Advanced Hunting Take Action
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Advanced Hunting Find Ransomware
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-find-ransomware.md.
Create Hunting Queries for Microsoft Sentinel Solutions
Hunting and detection
Added Microsoft Defender documentation in sentinel/isv/sentinel-hunting-rules-creation.md.
Custom functions in the advanced hunting schema
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-custom-functions.md.
Customer intent: As a security engineer or administrator, I want to create jobs in the Microsoft Sentinel data lake so that I can run KQL queries aga…
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs.md.
Customer intent: As a security engineer, I want to troubleshoot KQL queries in the Microsoft Sentinel data lake so that I can resolve common issues a…
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-troubleshoot.md.
Extend advanced hunting coverage with the right settings
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-extend-data.md.
Investigate behaviors with advanced hunting | Microsoft Defender for Cloud Apps
Hunting and detection
Updated Microsoft Defender documentation in defender-for-cloud-apps/behaviors.md.
Kql Sample Queries
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-sample-queries.md.
Migrate advanced hunting queries from Microsoft Defender for Endpoint
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-migrate-from-mde.md.
Review and remove unnecessary allowlist entries with Advanced Hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/review-allow-entries.md.
Run KQL queries on the Microsoft Sentinel data lake
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries.md.
Run KQL queries on the Microsoft Sentinel data lake using APIs
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries-api.md.
Sentinel Hunting Rules Creation
Hunting and detection
Removed Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.
Use Microsoft Sentinel custom functions in advanced hunting in Microsoft Defender
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-use-custom-rules.md.
Use the advanced hunting query resource report
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-limits.md.
Work with advanced hunting results containing Microsoft Sentinel data
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-results.md.
Work with STIX objects and indicators to enhance threat intelligence and threat hunting in Microsoft Sentinel (Preview)
Hunting and detection
Updated Microsoft Defender documentation in sentinel/work-with-stix-objects-indicators.md.
Advanced Hunting Deviceevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceevents-table.md.
Advanced Hunting Devicefileevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicefileevents-table.md.
Advanced Hunting Deviceimageloadevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceimageloadevents-table.md.
Advanced Hunting Devicelogonevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicelogonevents-table.md.
Advanced Hunting Devicenetworkevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicenetworkevents-table.md.
Advanced Hunting Deviceregistryevents Table
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceregistryevents-table.md.
Before you begin using the Microsoft Defender Experts for Hunting service
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/before-you-begin-defender-experts.md.
Build hunting queries using guided mode in Microsoft Defender
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-builder.md.
Custom Detection Rules
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Learn the advanced hunting query language
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-language.md.
Manage existing custom detection rules
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/custom-detection-manage.md.
Microsoft Security Copilot advanced hunting query assistant
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot-query-assistant.md.
Microsoft Security Copilot in advanced hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot.md.
Microsoft Security Copilot Threat Hunting Agent in advanced hunting (preview)
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot-threat-hunting-agent.md.
Start using Microsoft Defender Experts for Hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/onboarding-defender-experts-for-hunting.md.
Take action on advanced hunting query results
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Use shared queries in advanced hunting
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-shared-queries.md.
Work with advanced hunting query results in Microsoft Defender
Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-results.md.
Add Advanced Hunting community queries to Microsoft Defender XDR and Microsoft Sentinel
Hunting and detection
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/add-advanced-hunting-community-queries.md.
Kql Queries
Hunting and detection
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries.md.
Attack path analysis and enhanced risk-hunting for containers
Hunting and detection
Updated Microsoft Defender documentation in defender-for-cloud/how-to-test-attack-path-and-security-explorer-with-vulnerable-container-image.md.