Update

Author: schmurky

defender-xdr/advanced-hunting-messageevents-table.md

@@ -44,7 +44,7 @@ For information on other tables in the advanced hunting schema, [see the advance
 | `SenderDisplayName` | `string` | Name of the sender displayed in the address book, typically a combination of a first name, a middle initial, and a last name or surname |
 | `SenderObjectId` | `string` | Unique identifier for the sender’s account  |
 | `SenderType` | `string` | Type of user that sent the message, for example, User, Group, Anonymous  |
-| `RecipientDetails` | `dynamic` | Array of recipient data (RecipientEmailAddress, RecipientDisplayName, RecipientType, RecipientObjectId) |
+| `RecipientDetails` | `dynamic` | Array of recipient data (RecipientSmtpAddress, RecipientDisplayName, RecipientType, RecipientObjectId) |
 | `IsOwnedThread` | `boolean` | Boolean value indicating whether the message is owned by your organization or not (only the messages owned by your organization can be remediated)|
 | `MessageId` | `string` | Identifier for the message (non-unique)|
 | `ParentMessageId` | `string` | Identifier for the message that the current message was a reply to, otherwise this is the same as the MessageId|

defender-xdr/advanced-hunting-messagepostdeliveryevents-table.md

@@ -43,7 +43,7 @@ For information on other tables in the advanced hunting schema, [see the advance
 | `ActionTrigger` | `string` | Indicates whether an action was triggered by an administrator (manually or through approval of a pending automated action), or by some special mechanism, such as a ZAP or Dynamic Delivery |
 | `ActionResult` | `string` | Result of the action |
 | `SenderEmailAddress` | `string` | Email address of the sender |
-| `RecipientDetails` | `dynamic` | Array of recipient data (RecipientEmailAddress, RecipientDisplayName, RecipientType, RecipientObjectId) |
+| `RecipientDetails` | `dynamic` | Array of recipient data (RecipientSmtpAddress, RecipientDisplayName, RecipientType, RecipientObjectId) |
 | `ThreatTypes` | `string` |Verdict from the filtering stack on whether the message contains malware, phishing, or other threats|
 | `ConfidenceLevel` | `dynamic` |List of confidence levels for each threat type identified|
 | `DetectionMethods` | `string` |Methods used to detect malware, phishing, or other threats found in the message|