New properties for 'sensorCandidate' resource type in Graph-API (preview)

December 2025
New properties for 'sensorCandidate' resource type in Graph-API (preview)

Property: domainName
Type: String
Description: The domain name of the sensor.

Property: senseClientVersion
Type: String
Description: The version of the Defender for Identity sensor client.

This capability is currently in preview and available in API Beta version.

ADWS LDAP search in Advanced Hunting
New ADWS LDAP search activity is now available in the 'IdentityQueryEvents' table in Advanced Hunting. This can provides visibility into directory queries performed through ADWS, helping customers track these operations and create custom detection based on this data.

Version number: 2.252
Updates: Includes bug fixes and stability improvements for the Microsoft Defender for Identity sensor.

Version number: 2.253
Updates: Includes bug fixes and stability improvements for the Microsoft Defender for Identity sensor.