Forum Discussion

ghostrider31's avatar
ghostrider31
Copper Contributor
Oct 30, 2025
Solved

XDR Advanced hunting API region availability

Hi, I am exploring  XDR advanced hunting API to fetch data specific to Microsoft Defender for Endpoint tenants. The official documentation (https://learn.microsoft.com/en-us/defender-xdr/api-advanced...
microsoft defender for endpoint
threat hunting
  • ckyalo's avatar
    ckyalo
    Apr 10, 2026
    1. Yes, calling https://login.microsoftonline.com/{tenantId}/v2.0/.well-known/openid-configuration will return the correct region-specific endpoint, meaning you use a single global discovery URL and not hard-code regional endpoints.

    2. The Microsoft Graph runHuntingQuery API is not available in China (21Vianet), you'll need to use https://api-cn.security.microsoft.com/api/advancedhunting/run

ckyalo's avatar
ckyalo
Icon for Microsoft rankMicrosoft
Apr 10, 2026
  1. Yes, calling https://login.microsoftonline.com/{tenantId}/v2.0/.well-known/openid-configuration will return the correct region-specific endpoint, meaning you use a single global discovery URL and not hard-code regional endpoints.

  2. The Microsoft Graph runHuntingQuery API is not available in China (21Vianet), you'll need to use https://api-cn.security.microsoft.com/api/advancedhunting/run