Search

MC697431 – WDAC Advanced Hunting Retired ActionTypes and Fields (archived)

Microsoft Exchange Logo

check before: 2023-12-26

Product:

Exchange

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Retirement

Links:

Details:

Microsoft will be renaming the PolicyNameBuffer and PolicyIdBuffer fields in MDE Advanced Hunting WDAC events. These fields will be renamed to PolicyName and PolicyID, respectively. We will continue to improve the experience and richness of WDAC event data in Advanced Hunting.
Additionally, we will be retiring the following WDAC action types from Advanced Hunting:
AppControlCodeIntegrityImageAudited (3035)
AppControlCodeIntegrityPolicyAudited (3078)
AppControlCodeIntegrityPolicyBlocked (3079)
AppControlCodeIntegrityPolicyAudited (3080)
AppControlCodeIntegrityPolicyBlocked (3081)
[When this will happen:]
We will begin rolling out this change in mid-January 2024 and expect to complete by late January 2024.

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Release Phase:

Created:
2023-12-12

updated:
2023-12-12

the free basic plan is required to see all details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.


Last updated 2 months ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!