Change log for MICROSOFT_DEFENDER_ENDPOINT

Date	Changes
2022-03-30	Enhancement- 1) For events AdvancedHunting-DeviceNetworkInfo and AdvancedHunting-DeviceInfo : - Changed mapping for deviceId from 'entity.asset.asset_id' to 'entity.asset.product_object_id'. - Changed mapping for ReportId from 'entity.asset.product_object_id' to 'entity.asset.attribute.labels'. 2) For all other events: - Mapped deviceId to 'metadata.product_log_id'. - Changed mapping for ReportId from 'metadata.product_log_id' to 'about.labels'.

Date

Changes

2022-03-30

Enhancement-
1) For events AdvancedHunting-DeviceNetworkInfo and AdvancedHunting-DeviceInfo :
- Changed mapping for deviceId from 'entity.asset.asset_id' to 'entity.asset.product_object_id'.
- Changed mapping for ReportId from 'entity.asset.product_object_id' to 'entity.asset.attribute.labels'.
2) For all other events:
- Mapped deviceId to 'metadata.product_log_id'.
- Changed mapping for ReportId from 'metadata.product_log_id' to 'about.labels'.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-10-28 UTC.