M365 Change Tracker

← All changes · defender

GA

The following advanced hunting schema tables are now generally available

The following advanced hunting schema tables are now generally available: The DisruptionAndResponseEvents table contains information about automatic attack disruption events in Microsoft Defender XDR. The `CloudAuditEvents` table contains information about cloud audit events for various cloud platforms protected by the organization's Microsoft Defender for Cloud. The `CloudDnsEvents` table contains information about DNS activity events from cloud infrastructure environments. The `CloudProcessEvents` table contains information about process events in multicloud hosted environments.

Source last updated 2026-06-01

Affected: Microsoft Defender XDR, Defender for Cloud, Advanced Hunting

Related changes

View at Microsoft →