Forum Discussion

letso's avatar
letso
Copper Contributor
Sep 22, 2026

RESYNC MICROSOFT DEFENDER FOR ENDPOINT

hey guys im a junior IT officer and i have been tasked with finding a way to get microsoft defender for enpoint to get fresh data without waiting 24hrs or the 4 hours that microsoft insists the resync will happen,I tried advanced hunting running queries directly there,i tried runnning an anti virus scan but nothing happened and APIs i tried looking for APIs that can initiate a restart but nothing...any ideas ? i read on here there was github repo for using powerBI with defender to get new data https://github.com/microsoft/MicrosoftDefenderForEndpoint-PowerBI but its not clear how that work...any intel would be helpful 

1 Reply

  • jbmartin6's avatar
    jbmartin6
    Iron Contributor

    I'm not sure what you mean by "fresh data". Our clients send telemetry in pretty frequently, and these event are visible in advanced hunting right away. What data do you mean that are refreshed every 4 hours?