Skip to content

Commit 04e45a8

Browse files
committed
adding advanced hunting table note
1 parent 303d8e9 commit 04e45a8

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/sentinel/move-to-defender.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -215,7 +215,10 @@ For more information, see [Incidents and alerts in the Microsoft Defender portal
215215

216216
After onboarding Microsoft Sentinel to the Defender portal, access and use all your existing Kusto Query Language (KQL) queries and functions in the **Advanced hunting** page.
217217

218-
Some differences exist, such as that bookmarks aren't supported in **Advanced hunting**. Instead, bookmarks are supported in the Defender portal under **Microsoft Sentinel > Threat management > Hunting**.
218+
Some differences exist, such as:
219+
220+
- Bookmarks aren't supported in **Advanced hunting**. Instead, bookmarks are supported in the Defender portal under **Microsoft Sentinel > Threat management > Hunting**.
221+
- While the **SecurityAlert** table doesn't appear in **Advanced hunting** > **Schema** list of tables, it's still supported in your queries.
219222

220223
For more information, see [Advanced hunting with Microsoft Sentinel data in Microsoft Defender](/defender-xdr/advanced-hunting-microsoft-defender), especially the list of [known issues](/defender-xdr/advanced-hunting-microsoft-defender), and [Keep track of data during hunting with Microsoft Sentinel](/azure/sentinel/bookmarks).
221224

0 commit comments

Comments
 (0)