Merge pull request #4556 from EdB-MSFT/aux-tables-note

note re aux log after lake onboarding

Author: EdB-MSFT

defender-xdr/advanced-hunting-microsoft-defender.md

@@ -23,7 +23,7 @@ ms.topic: concept-article
 appliesto:
     - Microsoft Defender XDR
     - Microsoft Sentinel in the Microsoft Defender portal
-ms.date: 02/10/2025
+ms.date: 07/22/2025
 ---
 
 # Advanced hunting with Microsoft Sentinel data in Microsoft Defender portal
@@ -34,6 +34,9 @@ Querying from a single portal across different data sets makes hunting more effi
 
 [!INCLUDE [unified-soc-preview](../includes/unified-soc-preview.md)]
 
+> [!NOTE]
+> After onboarding to the Microsoft Sentinel data lake, auxiliary log tables are no longer available in Microsoft Defender advanced hunting. Instead, you can access them through data lake exploration KQL queries in the Defender portal. For more information, see [KQL queries in the Microsoft Sentinel data lake](/azure/sentinel/datalake/kql-queries).
+
 ## How to access
 
 ### Required roles and permissions