use the adx() operator to query tables stored in Azure Data Explore
Defender XDRMicrosoft
What's new in Microsoft Defender XDR
June 2025
- (GA) In advanced hunting, Microsoft Defender portal users can now use the adx() operator to query tables stored in Azure Data Explorer. You no longer need to go to log analytics in Microsoft Sentinel to use this operator if you're already in Microsoft Defender.
