M365 Defender Advanced Hunting export DeviceTvmSoftwareVulnerabilitiesKB to Power BI

[Anonymous]

I am trying to export the DeviceTvmSoftwareVulnerabilitiesKB table from the M365 Defender Advanced Hunting page to Power BI. I am using the query provided here and setting "AdvancedHuntingQuery" to "DeviceTvmSoftwareVulnerabilitiesKB".

This works perfectly when I query for "DeviceTvmSoftwareVulnerabilities", but not for "DeviceTvmSoftwareVulnerabilitiesKB". Can anyone explain why this is?

I'm posting this in the M365 Security section because, given the query works for one table and not the other, I believe it is a problem with the M365 Defender API rather than with Power BI. However it could be a PBI issue.

[v-kelly-msft]

Hi  @Anonymous ,

Although I also believe it should be an API related issue,but I find a reference below,not sure whether it would help,check first:

https://docs.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-schema-tables?view=o365-worldwide

Best Regards,
Kelly

Did I answer your question? Mark my post as a solution!

[nkoapentocom]

I have difficulties when I query for "DeviceTvmSoftwareVulnerabilities", even when I use the query you provided. How do you get this to work? 🙂

[Anonymous]

Wish I could help you, but I don't know. I just copy/pasted the query exactly as it is into the PBI Advanced Editor, then set "AdvancedHuntingQuery" equal to "DeviceTvmSoftwareVulnerabilities". No issues at all.