{"id":10178,"date":"2025-02-28T11:01:30","date_gmt":"2025-02-28T02:01:30","guid":{"rendered":"https:\/\/m365jp.net\/?p=10178"},"modified":"2025-02-28T11:01:47","modified_gmt":"2025-02-28T02:01:47","slug":"mc1019307-microsoft-defender-xdr-services-new-ldap-query-events-added-to-the-identityqueryevents-table-in-advanced-hunting","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-02-28-mc1019307-microsoft-defender-xdr-services-new-ldap-query-events-added-to-the-identityqueryevents-table-in-advanced-hunting","title":{"rendered":"MC1019307 | Microsoft Defender XDR services: New LDAP query events added to the IdentityQueryEvents table in Advanced Hunting"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1019307 | Microsoft Defender XDR services: New LDAP query events added to the IdentityQueryEvents table in Advanced Hunting<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n02\/28\/2025 01:27:41<\/td>\n<\/tr>\n
Start Time<\/th>\n02\/28\/2025 01:24:57<\/td>\n<\/tr>\n
End Time<\/th>\n04\/14\/2025 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

New LDAP query events will be added to the IdentityQueryEvents table in Advanced Hunting to provide more visibility into additional LDAP search queries running in the customer environment.<\/p>\n

[When this will happen:]<\/p>\n

General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out in early March 2025 and expect to complete by mid-March 2025. <\/p>\n

[How this will affect your organization:]<\/p>\n

This update may lead to an increase in activity within the Advanced Hunting IdentityQueryEvents table for LDAP queries. If you have custom detections related to these queries, you may see a higher number of triggered alerts.<\/p>\n

This update is available by default. <\/p>\n

[What you need to do to prepare:]<\/p>\n

We recommend that you review your existing custom detections to ensure they align with your objectives. If needed, you can adjust your query accordingly.<\/p>\n

More information: Create and manage custom detection rules in Microsoft Defender XDR<\/a><\/p>\n<\/td>\n<\/tr>\n

Machine Translation<\/th>\n\n

\u65b0\u3057\u3044 LDAP \u30af\u30a8\u30ea \u30a4\u30d9\u30f3\u30c8\u306f\u3001Advanced Hunting \u306e IdentityQueryEvents \u30c6\u30fc\u30d6\u30eb\u306b\u8ffd\u52a0\u3055\u308c\u3001\u9867\u5ba2\u74b0\u5883\u3067\u5b9f\u884c\u3055\u308c\u3066\u3044\u308b\u8ffd\u52a0\u306e LDAP \u691c\u7d22\u30af\u30a8\u30ea\u306e\u53ef\u8996\u6027\u304c\u5411\u4e0a\u3057\u307e\u3059\u3002<\/p>\n

[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n

\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC High\u3001DoD): 2025 \u5e74 3 \u6708\u4e0a\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012025 \u5e74 3 \u6708\u4e2d\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n

[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]<\/p>\n

\u3053\u306e\u66f4\u65b0\u306b\u3088\u308a\u3001LDAP \u30af\u30a8\u30ea\u306e Advanced Hunting IdentityQueryEvents \u30c6\u30fc\u30d6\u30eb\u5185\u306e\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u304c\u5897\u52a0\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30af\u30a8\u30ea\u306b\u95a2\u9023\u3059\u308b\u30ab\u30b9\u30bf\u30e0\u691c\u51fa\u304c\u3042\u308b\u5834\u5408\u306f\u3001\u30c8\u30ea\u30ac\u30fc\u3055\u308c\u305f\u30a2\u30e9\u30fc\u30c8\u306e\u6570\u304c\u591a\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

\u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5229\u7528\u53ef\u80fd\u3067\u3059\u3002 <\/p>\n

\u3010\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068\u3011<\/p>\n

\u65e2\u5b58\u306e\u30ab\u30b9\u30bf\u30e0\u691c\u51fa\u3092\u78ba\u8a8d\u3057\u3066\u3001\u76ee\u7684\u306b\u5408\u81f4\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u3001\u305d\u308c\u306b\u5fdc\u3058\u3066\u30af\u30a8\u30ea\u3092\u8abf\u6574\u3067\u304d\u307e\u3059\u3002<\/p>\n

\u8a73\u7d30: Microsoft Defender XDR \u3067\u30ab\u30b9\u30bf\u30e0\u691c\u51fa\u30eb\u30fc\u30eb\u3092\u4f5c\u6210\u304a\u3088\u3073\u7ba1\u7406\u3059\u308b<\/a><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

MC1019307 | Microsoft Defender XDR services: New LDAP query events added to the IdentityQueryEvents table in A […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-10178","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/10178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=10178"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/10178\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=10178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=10178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=10178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}