More updates

Author: schmurky

defender-xdr/advanced-hunting-behaviorentities-table.md

@@ -40,6 +40,11 @@ Behaviors are a type of data in Microsoft Defender XDR based on one or more raw
 
 This advanced hunting table is populated by records from Microsoft Defender for Cloud Apps. If your organization hasn’t deployed the service in Microsoft Defender XDR, queries that use the table aren’t going to work or return any results. For more information about how to deploy services in Defender XDR, read [Deploy supported services](deploy-supported-services.md).
 
+To make sure the `BehaviorEntities` table is populated by Microsoft Defender for Cloud Apps data:
+1.  Go to the Defender portal and select **Settings > Cloud apps > App connectors**.
+2.  In the **Select Microsoft 365 components** page, select the **Microsoft 365 activities** checkbox.
+ For detailed instructions, see: [Connect Microsoft 365 to Microsoft Defender for Cloud Apps](/defender-cloud-apps/protect-office-365#prerequisites)
+
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
 
 | Column name | Data type | Description |

defender-xdr/advanced-hunting-behaviorinfo-table.md

@@ -42,6 +42,11 @@ Behaviors are a type of data in Microsoft Defender XDR based on one or more raw
 
 This advanced hunting table is populated by records from Microsoft Defender for Cloud Apps. If your organization hasn’t deployed the service in Microsoft Defender XDR, queries that use the table aren’t going to work or return any results. For more information about how to deploy services in Defender XDR, read [Deploy supported services](deploy-supported-services.md).
 
+To make sure the `BehaviorInfo` table is populated by Microsoft Defender for Cloud Apps data:
+1.  Go to the Defender portal and select **Settings > Cloud apps > App connectors**.
+2.  In the **Select Microsoft 365 components** page, select the **Microsoft 365 activities** checkbox.
+ For detailed instructions, see: [Connect Microsoft 365 to Microsoft Defender for Cloud Apps](/defender-cloud-apps/protect-office-365#prerequisites)
+
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
 
 | Column name | Data type | Description |

defender-xdr/advanced-hunting-cloudappevents-table.md

@@ -36,7 +36,7 @@ The `CloudAppEvents` table in the [advanced hunting](advanced-hunting-overview.m
 This advanced hunting table is populated by records from Microsoft Defender for Cloud Apps. If your organization hasn’t deployed the service in Microsoft Defender XDR, queries that use the table aren’t going to work or return any results. For more information about how to deploy Defender for Cloud Apps in Defender XDR, read [Deploy supported services](deploy-supported-services.md).
 
 
-To make sure the `CloudAppEvents` data is populated:
+To make sure the `CloudAppEvents` table is populated:
 
 1.  Go to the Defender portal and select **Settings > Cloud apps > App connectors**.
 

defender-xdr/advanced-hunting-deviceinfo-table.md

@@ -35,7 +35,7 @@ The `DeviceInfo` table in the [advanced hunting](advanced-hunting-overview.md) s
 > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
 
 
-This advanced hunting table is populated by records from various Microsoft services. If your organization hasn’t deployed the service in Microsoft Defender XDR, queries that use the table aren’t going to work or return any results. For more information about how to deploy Defender for Endpoint in Defender XDR, read [Deploy supported services](deploy-supported-services.md).
+This advanced hunting table is populated by records from various Microsoft services. If your organization hasn’t deployed the service in Microsoft Defender XDR, queries that use the table aren’t going to work or return any results. For more information about how to deploy a Microsoft service in Defender XDR, read [Deploy supported services](deploy-supported-services.md).
 
 
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).