MC1330888 — Upcoming change to Microsoft Defender for Endpoint Advanced Hunting: removal of SMB signature data

Starting July 13, 2026, Microsoft Defender for Endpoint will remove SMB signature inspection events from Advanced Hunting to improve performance. Queries using these events will stop working; users should update them to filter SMB traffic by port 445 in DeviceNetworkEvents before July 1, 2026.