Forum Discussion
SteBeSec
Jun 16, 2021Iron Contributor
MDE API - How to get all devices?
I‘m currently trying to get alle device objects from MDE via REST API. Unfortunately, I only get 10.000 of my 23.000 machines. The API Documentation states that the maximum pagesize is 10.000, but th...
- Jun 18, 2021There is a new preview feature for M365 Defender: https://docs.microsoft.com/en-us/microsoft-365/security/defender/api-overview?view=o365-worldwide
that will return up to 100,000 rows:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/api-advanced-hunting?view=o365-worldwide#quotas-and-resource-allocation
shoando
Jun 18, 2021Brass Contributor
Since the maximum number of numbers is the number of steps, consider using "| summarize make_list(DeviceName)" Advanced Hunting API etc. to reduce the number of line counts.