MDA Passive Telemetry

Does anyone know where log (LSA,Device,CredGuard) are stored in query table for MDA in Passive mode?

I found these signals but don't recall where. Please advise

I have several tables as follows:

//DeviceEvents
//DeviceFileCertificateInfo
//DeviceImageLoadEvents
//DeviceFileEvents
//DeviceImageLoadEvents
//Deviceinfo

...