File tree Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Original file line number Diff line number Diff line change @@ -82,6 +82,17 @@ Advanced hunting results are converted to the [timezone](m365d-time-zone.md) set
82
82
83
83
84
84
85
+ ## To extend the 30 days retention for Advanced Hunting, you can use Streaming API's
86
+
87
+ In order to extend the 30 days retention for Advanced Hunting are:
88
+
89
+ - Microsoft Defender XDR [ Streaming API] ( /defender-xdr/streaming-api )
90
+
91
+ - Microsoft Defender for Endpoint [ Raw Data Streaming API] ( /defender-endpoint/api/raw-data-export )
92
+
93
+ > [ !NOTE]
94
+ > The data retained is from the first (1st) day that you implement and enable the streaming api.
95
+
85
96
## Related topics
86
97
- [ Choose between guided and advanced hunting modes] ( advanced-hunting-modes.md )
87
98
- [ Build hunting queries using guided mode] ( advanced-hunting-query-builder.md )
You can’t perform that action at this time.
0 commit comments