Skip to content

Commit 47e33ec

Browse files
committed
Learn Editor: Update advanced-hunting-overview.md
1 parent 425636b commit 47e33ec

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

defender-xdr/advanced-hunting-overview.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,17 @@ Advanced hunting results are converted to the [timezone](m365d-time-zone.md) set
8282

8383

8484

85+
## To extend the 30 days retention for Advanced Hunting, you can use Streaming API's
86+
87+
In order to extend the 30 days retention for Advanced Hunting are:
88+
89+
- Microsoft Defender XDR [Streaming API](/defender-xdr/streaming-api)
90+
91+
- Microsoft Defender for Endpoint [Raw Data Streaming API](/defender-endpoint/api/raw-data-export)
92+
93+
> [!NOTE]
94+
> The data retained is from the first (1st) day that you implement and enable the streaming api.
95+
8596
## Related topics
8697
- [Choose between guided and advanced hunting modes](advanced-hunting-modes.md)
8798
- [Build hunting queries using guided mode](advanced-hunting-query-builder.md)

0 commit comments

Comments
 (0)