Optimized reporting latency and expedite mode

ATP search for footprint of the files - this also covers what was on the endpoint in the past. 

• Mostly design for security investigations where the SOC analyst would like to apply time travel to the attack start time and track it from there

If you are interested in tracking vulnerabilities, have you tried https://securitycenter.microsoft.com/tvm_dashboard ?

Thanks,

Tomer