Skip to content

Commit 376a40e

Browse files
committed
note re aux log agter lake onboarding
1 parent 70f1735 commit 376a40e

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

defender-xdr/advanced-hunting-microsoft-defender.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ ms.topic: concept-article
2323
appliesto:
2424
- Microsoft Defender XDR
2525
- Microsoft Sentinel in the Microsoft Defender portal
26-
ms.date: 02/10/2025
26+
ms.date: 07/22/2025
2727
---
2828

2929
# Advanced hunting with Microsoft Sentinel data in Microsoft Defender portal
@@ -34,6 +34,9 @@ Querying from a single portal across different data sets makes hunting more effi
3434

3535
[!INCLUDE [unified-soc-preview](../includes/unified-soc-preview.md)]
3636

37+
> [!NOTE]
38+
> After onboarding to the Microsoft Sentinel data lake, auxiliary log tables are no longer available in Microsoft Defender Advanced hunting. Instead, you can access them through data lake exploration KQL queries in the Defender portal. For more information, see [KQL queries in the Microsoft Sentinel data lake](/sentinel/datalake/kql-queries).
39+
3740
## How to access
3841

3942
### Required roles and permissions

0 commit comments

Comments
 (0)