diff --git a/defender-xdr/custom-detection-rules.md b/defender-xdr/custom-detection-rules.md
index 67757b5670..fab7ae04c4 100644
--- a/defender-xdr/custom-detection-rules.md
+++ b/defender-xdr/custom-detection-rules.md
@@ -194,7 +194,7 @@ Near real-time detections are supported for the following tables:
 - `DeviceProcessEvents`
 - `DeviceRegistryEvents`
 - `EmailAttachmentInfo`
-- `EmailEvents` (except `LatestDeliveryLocation` and `LatestDeliveryAction` columns)
+- `EmailEvents` (except `LatestDeliveryLocation`, `LatestDeliveryAction` and `ExchangeTransportRule` columns)
 - `EmailPostDeliveryEvents`
 - `EmailUrlInfo`
 - `IdentityDirectoryEvents`