Share via

Can I use Kusto Explorer on the Advanced hunting data from Defender portal?

Romain PRACCA 6 Reputation points
2025-01-13T16:57:31.3+00:00

Hello,

Is it possible to use Kusto Explorer to run KQL queries on the data available on the Defender portal (Advanced Hunting section)?

If not, will it be possible in the future ?

Best Regards

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,468 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
22 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 26,881 Reputation points Microsoft Employee
    2025-01-13T21:49:44.2633333+00:00

    Hi @Romain PRACCA , yes this is possible. Have you had the chance to review this document?

    Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,

    James

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.