Log Analytics tables for microsoft.securityinsights/processeventnormalized

Table Categories Solutions Supports basic log plan Queries
ASimProcessEventLogs

The Microsoft Sentinel process events normalized table stores events using the Process Event ASIM normalized schema associated with creation or termination of a process. Such events are reported by operating systems and security systems, such as EDR (End Point Detection and Response) systems.

security SecurityInsights Yes -