File tree Expand file tree Collapse file tree 1 file changed +11
-0
lines changed
Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Original file line number Diff line number Diff line change @@ -82,6 +82,17 @@ Advanced hunting results are converted to the [timezone](m365d-time-zone.md) set
8282
8383
8484
85+ ## To extend the 30 days retention for Advanced Hunting, you can use Streaming API's
86+
87+ In order to extend the 30 days retention for Advanced Hunting are:
88+
89+ - Microsoft Defender XDR [ Streaming API] ( /defender-xdr/streaming-api )
90+
91+ - Microsoft Defender for Endpoint [ Raw Data Streaming API] ( /defender-endpoint/api/raw-data-export )
92+
93+ > [ !NOTE]
94+ > The data retained is from the first (1st) day that you implement and enable the streaming api.
95+
8596## Related topics
8697- [ Choose between guided and advanced hunting modes] ( advanced-hunting-modes.md )
8798- [ Build hunting queries using guided mode] ( advanced-hunting-query-builder.md )
You can’t perform that action at this time.
0 commit comments