From bc22515e944645213cb882384f93a35303bcf6dd Mon Sep 17 00:00:00 2001 From: Louie Mayor Date: Tue, 25 Aug 2020 22:20:25 -0700 Subject: [PATCH] Update advanced-hunting-schema-reference.md --- .../microsoft-defender-atp/advanced-hunting-schema-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md index 9eaa69cd9d..0e2f6811ad 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md @@ -33,7 +33,7 @@ The [advanced hunting](advanced-hunting-overview.md) schema is made up of multip While constructing queries, use the built-in schema reference to quickly get the following information about each table in the schema: - **Tables description**—type of data contained in the table and the source of that data. -- **Columns**—*all the columns in the table. +- **Columns**—all the columns in the table. - **Action types**—possible values in the `ActionType` column representing the event types supported by the table. This is provided only for tables that contain event information. - **Sample query**—example queries that feature how the table can be utilized.