New LDAP query events will be added to the IdentityQueryEvents table in Advanced Hunting in March 2025, potentially increasing activity and alerts. Review and adjust custom detections as needed. More information is available [here](https://learn.microsoft.com/defender-xdr/custom-detection-rules).
Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).