M365 Change Tracker

← All changes · defender

Preview

The following advanced hunting schema tables are now available for preview

Why it matters: In preview

The following advanced hunting schema tables are now available for preview: The `CloudStorageAggregatedEvents` table contains information about storage activity and related events The `IdentityEvents` table contains information about identity events obtained from other cloud identity service providers

Source updated 2025-08-01

Affected: Microsoft Defender XDR, Advanced Hunting

View at Microsoft →