Skip to content

Commit

Permalink
Merge pull request #9413 from MicrosoftDocs/master
Browse files Browse the repository at this point in the history 
OOB for feedback url
  • Loading branch information
Thomas Raya authored Jul 8, 2021
2 parents 03a12d2 + a6a6a22 commit 0f308e2
Showing 1 changed file with 22 additions and 22 deletions.
44 changes: 22 additions & 22 deletions defender-xdr/advanced-hunting-aadspnsignineventsbeta-table.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -48,27 +48,27 @@ reference](/windows/security/threat-protection/microsoft-defender-atp/advanced-h



| Column name | Data type | Description |
| ----- | ----- | ---- |
| `Timestamp` | datetime | Date and time when the record was generated |
| `Application` | string | Application that performed the recorded action |
| `ApplicationId` | string | Unique identifier for the application |
| `IsManagedIdentity` | boolean | Indicates whether the sign-in was initiated by a managed identity |
| `ErrorCode` | int | Contains the error code if a sign-in error occurs. To find a description of a specific error code, visit <https://aka.ms/AADsigninsErrorCodes>. |
| `CorrelationId` | string | Unique identifier of the sign-in event |
| `ServicePrincipalName` | string | Name of the service principal that initiated the sign-in |
| `ServicePrincipalId` | string | Unique identifier of the service principal that initiated the sign-in |
| `ResourceDisplayName` | string | Display name of the resource accessed |
| `ResourceId` | string | Unique identifier of the resource accessed |
| `ResourceTenantId` | string | Unique identifier of the tenant of the resource accessed |
| `IPAddress` | string | IP address assigned to the endpoint and used during related network communications |
| `Country` | string | Two-letter code indicating the country where the client IP address is geolocated |
| `State` | string | State where the sign-in occurred, if available |
| `City` | string | City where the account user is located |
| `Latitude` | string | The north to south coordinates of the sign-in location |
| `Longitude` | string | The east to west coordinates of the sign-in location |
| `RequestId` | string | Unique identifier of the request |
|`ReportId` | string | Unique identifier for the event | 
| Column name | Data type | Description |
|-----|-----|-----|
| `Timestamp` | datetime | Date and time when the record was generated |
| `Application` | string | Application that performed the recorded action |
| `ApplicationId` | string | Unique identifier for the application |
| `IsManagedIdentity` | boolean | Indicates whether the sign-in was initiated by a managed identity |
| `ErrorCode` | int | Contains the error code if a sign-in error occurs. To find a description of a specific error code, visit <https://aka.ms/AADsigninsErrorCodes>. |
| `CorrelationId` | string | Unique identifier of the sign-in event |
| `ServicePrincipalName` | string | Name of the service principal that initiated the sign-in |
| `ServicePrincipalId` | string | Unique identifier of the service principal that initiated the sign-in |
| `ResourceDisplayName` | string | Display name of the resource accessed |
| `ResourceId` | string | Unique identifier of the resource accessed |
| `ResourceTenantId` | string | Unique identifier of the tenant of the resource accessed |
| `IPAddress` | string | IP address assigned to the endpoint and used during related network communications |
| `Country` | string | Two-letter code indicating the country where the client IP address is geolocated |
| `State` | string | State where the sign-in occurred, if available |
| `City` | string | City where the account user is located |
| `Latitude` | string | The north to south coordinates of the sign-in location |
| `Longitude` | string | The east to west coordinates of the sign-in location |
| `RequestId` | string | Unique identifier of the request |
|`ReportId` | string | Unique identifier for the event |



Expand All @@ -80,4 +80,4 @@ reference](/windows/security/threat-protection/microsoft-defender-atp/advanced-h
- [Learn the query
language](/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-query-language)
- [Understand the
schema](/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference)
schema](/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference)

0 comments on commit 0f308e2

Please sign in to comment.