Advanced hunting now supports custom functions that use tabular parameters.

Why it matters: Generally available

Advanced hunting now supports custom functions that use tabular parameters. By using tabular parameters, you can pass entire tables as inputs. This approach lets you build more modular, reusable, and expressive logic across your hunting queries. Learn more

Affected: Microsoft Defender XDR, Advanced Hunting

View at Microsoft → Copy summary