EXPLORE
Sign In
← Back to Explore
kqlHunting

Defender XDR Custom Detection Modifications

Detection Query

CloudAppEvents
| where ActionType == @"DeleteCustomDetection" or  ActionType == @"CreateCustomDetection" or ActionType == @"EditCustomDetection"

Data Sources

CloudAppEvents

Tags

defenderdetection
Raw Content
CloudAppEvents
| where ActionType == @"DeleteCustomDetection" or  ActionType == @"CreateCustomDetection" or ActionType == @"EditCustomDetection"