



Column nameĭate and time when the event was recorded Use this reference to construct queries that return information from this table.įor detailed information about the events types ( ActionType values) supported by a table, use the built-in schema reference available in Microsoft 365 Defender.įor information on other tables in the advanced hunting schema, see the advanced hunting reference. If the firewall allows the outbound SYN and the camera responds that the port is not available ( RST,ACK for this test device) then the application knows there exists a device with that IP address.The DeviceNetworkEvents table in the advanced hunting schema contains information about network connections and related events. The application does network discovery with port scans not a ping (ICMP) sweep: No.
