Advanced Hunting Updates in DeviceInfo

The DeviceInfo and DeviceNetworkInfo tables in advanced hunting are getting several updates that aim to improve data freshness and add new device details, according to this post. Beginning in early March 2023 and ending by the middle of that month, the updates will send a complete report by device every hour rather than every 24 hours, provide more updated device information, and improve several DeviceInfo and DeviceNetworkInfo fields. Mobile devices will be assigned to the DeviceType value of "Mobile" instead of "Unknown". The post also describes new fields available in the DeviceInfo table which include SensorHealthState.

By adopting these updates, organizations can have more visibility and control over what's happening in their network, should they use DeviceInfo in their hunting queries. It is essential to note that regular users of the DeviceInfo table in advanced hunting will have to adjust their device report cadence accordingly. However, the new updates promise more efficient data collection, which translates to a better data-driven story on your dashboard.

The post Advanced Hunting Updates in DeviceInfo originally appeared on M365 Admin.