M365 Change Tracker

← All changes · defender

GA

In advanced hunting, Microsoft Defender portal users can now use the `adx()` operator to query tables stored in Azure Data Explorer.

From Microsoft's description: “You no longer need to go to log analytics in Microsoft Sentinel to use this operator if you're already in Microsoft Defender.”

In advanced hunting, Microsoft Defender portal users can now use the `adx()` operator to query tables stored in Azure Data Explorer. You no longer need to go to log analytics in Microsoft Sentinel to use this operator if you're already in Microsoft Defender.

Source last updated 2025-06-01

Affected: Microsoft Defender XDR, Advanced Hunting

Related changes

View at Microsoft →