M365 Change Tracker

← All changes · defender

GA

In advanced hunting, Microsoft Defender portal users can now use the `adx()` operator to query tables stored in Azure Data Explorer.

Why it matters: Generally available

What to do: You no longer need to go to log analytics in Microsoft Sentinel to use this operator if you're already in Microsoft Defender.

In advanced hunting, Microsoft Defender portal users can now use the `adx()` operator to query tables stored in Azure Data Explorer. You no longer need to go to log analytics in Microsoft Sentinel to use this operator if you're already in Microsoft Defender.

Source updated 2025-06-01

Affected: Microsoft Defender XDR, Advanced Hunting

View at Microsoft →