Skip to content

Commit a6337bf

Browse files
authored
Merge pull request #3839 from MicrosoftDocs/maccruz-mdcloud
MDC updates
2 parents cd24e2c + 5f63024 commit a6337bf

File tree

2 files changed

+14
-7
lines changed

2 files changed

+14
-7
lines changed

defender-xdr/advanced-hunting-cloudauditevents-table.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,24 +17,26 @@ ms.collection:
1717
ms.custom:
1818
- cx-ti
1919
- cx-ah
20+
appliesto:
21+
- Microsoft Defender XDR
22+
- Microsoft Sentinel in the Microsoft Defender portal
2023
ms.topic: reference
21-
ms.date: 12/29/2023
24+
ms.date: 05/20/2025
2225
---
2326

2427
# CloudAuditEvents (Preview)
2528

2629
[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
2730

28-
**Applies to:**
29-
- Microsoft Defender XDR
30-
3131

3232

3333
The `CloudAuditEvents` table in the [advanced hunting](advanced-hunting-overview.md) schema contains information about cloud audit events for various cloud platforms protected by the organization's [Microsoft Defender for Cloud](/azure/defender-for-cloud/concept-integration-365#advanced-hunting-in-xdr). Use this reference to construct queries that return information from this table.
3434

3535
> [!IMPORTANT]
3636
> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
3737
38+
This advanced hunting table is populated by records from Microsoft Defender for Cloud. If your organization doesn't have Microsoft Defender for Cloud, queries that use the table aren’t going to work or return any results. For more information about prerequisites in integrating Defender for Cloud with Defender XDR, read [Microsoft Defender XDR integration](/azure/defender-for-cloud/concept-integration-365).
39+
3840
For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
3941

4042
| Column name | Data type | Description |

defender-xdr/advanced-hunting-cloudprocessevents-table.md

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,22 +17,27 @@ ms.collection:
1717
ms.custom:
1818
- cx-ti
1919
- cx-ah
20+
appliesto:
21+
- Microsoft Defender XDR
22+
- Microsoft Sentinel in the Microsoft Defender portal
2023
ms.topic: reference
21-
ms.date: 11/11/2024
24+
ms.date: 05/20/2025
2225
---
2326

2427
# CloudProcessEvents (Preview)
2528

2629
[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
2730

28-
**Applies to:**
29-
- Microsoft Defender XDR
31+
3032

3133
The `CloudProcessEvents` table in the [advanced hunting](advanced-hunting-overview.md) schema contains information about process events in multicloud hosted environments such as Azure Kubernetes Service, Amazon Elastic Kubernetes Service, and Google Kubernetes Engine as protected by the organization's [Microsoft Defender for Cloud](/azure/defender-for-cloud/concept-integration-365#advanced-hunting-in-xdr). Use this reference to construct queries that return information from this table.
3234

3335
> [!IMPORTANT]
3436
> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
3537
38+
This advanced hunting table is populated by records from Microsoft Defender for Cloud. If your organization doesn't have Microsoft Defender for Cloud, queries that use the table aren’t going to work or return any results. For more information about prerequisites in integrating Defender for Cloud with Defender XDR, read [Microsoft Defender XDR integration](/azure/defender-for-cloud/concept-integration-365).
39+
40+
3641
For information on other tables in the advanced hunting schema, see the [advanced hunting reference](advanced-hunting-schema-tables.md).
3742

3843
| Column name | Data type | Description |

0 commit comments

Comments
 (0)