Microsoft Defender XDR services: Changes to the IdentityInfo table in Advanced Hunting

MC1052160 · published Apr 10, 2025 · updated May 19, 2025 · 0 comments

Microsoft Defender XDR will unify the IdentityInfo tables from Microsoft Defender for Identity and Microsoft Sentinel in Advanced Hunting. The update, rolling out in May 2025, includes new identity attributes and support for third-party IDPs, requiring updates to existing queries. New columns and mappings are provided.