Stay organized with collections
Save and categorize content based on your preferences.
Change log for MICROSOFT_DEFENDER_ENDPOINT
Date
Changes
2022-03-30
Enhancement-
1) For events AdvancedHunting-DeviceNetworkInfo and AdvancedHunting-DeviceInfo :
- Changed mapping for deviceId from 'entity.asset.asset_id' to 'entity.asset.product_object_id'.
- Changed mapping for ReportId from 'entity.asset.product_object_id' to 'entity.asset.attribute.labels'.
2) For all other events:
- Mapped deviceId to 'metadata.product_log_id'.
- Changed mapping for ReportId from 'metadata.product_log_id' to 'about.labels'.