Skip to content

Commit c416fb7

Browse files
authored
Merge pull request #1860 from MicrosoftDocs/maccruz-argga
Edit and add to What's New
2 parents 83114e2 + 60e2e57 commit c416fb7

File tree

2 files changed

+5
-3
lines changed

2 files changed

+5
-3
lines changed

defender-xdr/advanced-hunting-defender-use-custom-rules.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ For editable functions, more options are available when you select the vertical
4343
- **Edit details** – opens the function side pane to allow you to edit details about the function (except folder names for Sentinel functions)
4444
- **Delete** – deletes the function
4545

46-
### Use arg() operator for Azure Resource Graph queries (Preview)
46+
### Use arg() operator for Azure Resource Graph queries
4747
The *arg()* operator can be used to query across deployed Azure resources like subscriptions, virtual machines, CPU, storage, and the like.
4848

4949
This feature was previously only available in log analytics in Microsoft Sentinel. In the Microsoft Defender portal, the `arg()` operator works over Microsoft Sentinel data (that is, Defender XDR tables are not supported). This allows users to use the operator in advanced hunting without needing to manually open a Microsoft Sentinel window.

defender-xdr/whats-new.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,11 +29,13 @@ For more information on what's new with other Microsoft Defender security produc
2929

3030
You can also get product updates and important notifications through the [message center](https://admin.microsoft.com/Adminportal/Home#/MessageCenter).
3131

32+
## November 2024
33+
- (GA) The `arg()` operator in [advanced hunting](advanced-hunting-defender-use-custom-rules.md#use-arg-operator-for-azure-resource-graph-queries) in Microsoft Defender portal is now generally available. Users can now use the *arg()* operator for Azure Resource Graph queries to search over Azure resources, and no longer need to go to Log Analytics in Microsoft Sentinel to use this operator if already in Microsoft Defender.
3234

3335
## October 2024
3436

3537
- [Microsoft Unified RBAC roles](experts-on-demand.md#required-permissions-for-using-ask-defender-experts) are added with new permission levels for Microsoft Threat Experts customers to use Ask Defender experts capability.
36-
- (Preview) In [advanced hunting](advanced-hunting-defender-use-custom-rules.md#use-arg-operator-for-azure-resource-graph-queries-preview), Microsoft Defender portal users can now use the *arg()* operator for Azure Resource Graph queries to search over Azure resources. You no longer need to go to Log Analytics in Microsoft Sentinel to use this operator if you are already in Microsoft Defender.
38+
- (Preview) In [advanced hunting](advanced-hunting-defender-use-custom-rules.md#use-arg-operator-for-azure-resource-graph-queries), Microsoft Defender portal users can now use the *arg()* operator for Azure Resource Graph queries to search over Azure resources. You no longer need to go to Log Analytics in Microsoft Sentinel to use this operator if you are already in Microsoft Defender.
3739

3840
## September 2024
3941

@@ -337,7 +339,7 @@ The security operations team can view all actions pending approval, and the stip
337339

338340
## June 2021
339341

340-
- (Preview) [View reports per threat tags](threat-analytics.md#view- reports-by-category)
342+
- (Preview) [View reports per threat tags](threat-analytics.md#view-reports-by-category)
341343

342344
Threat tags help you focus on specific threat categories and review the most relevant reports.
343345

0 commit comments

Comments
 (0)