Message CenterNew featureAdmin impact

MC1137606 — Streaming API support for Data Security tables in Microsoft Defender XDR Advanced Hunting

MC1137606Microsoft Defender XDR · Microsoft PurviewstayInformedUpdated: 18 August 2025

Microsoft Defender XDR will support Streaming API for DataSecurityEvents and DataSecurityBehaviors tables starting late August 2025, enabling real-time insider risk alert data delivery via event hubs. This push-based feature is off by default, requires setup, and allows integration with external platforms while offering admin control through Entra ID.

Open in Message Center View in the live feed
Applies to: Microsoft Defender XDR · Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).