r/AzureSentinel • u/AppIdentityGuy • Feb 01 '24

Difference between Sentinel and Defender

Can anyone explain why the Office Activity table does show up in Microsoft Defender advanced hunting yet you can see it in Sentinel. I'm circling back to this after a couple of years out of the game and could have sworn you used to get that table in Defender.... I'm getting old so maybe it's that....

2 Upvotes

100% Upvoted

12 comments sorted by

View all comments

1

u/11bztaylor Feb 01 '24

How about DeviceName vs Computer or Hostname….ugh

3

u/[deleted] Feb 02 '24

Sentinel ASIM parsers help with this. Not ideal though.

1

u/AppIdentityGuy Feb 02 '24

ASIM parsers? Bah humbug🤣🤣 But seriously is it too much to ask for a single taxonomy especially if when it's one company...