Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Data Retention for Azure ATP

Copper Contributor

I see lots of references to the type of data, password hashes and GDPR when I look for data retention but nothing specific to how many days Azure ATP will store data for? I found the 90-day reference to Audit logs but nothing about personal data reported by the sensors.

 

Microsoft Defender provides the option when creating the instance with a max of 180 days. Looking for something similar for Azure ATP.

 

Any help much appreciated.

4 Replies

@Razmi Patel I have alerts still appearing in my Azure ATP Portal from 2017. So it is much more than 180 days! 

old.jpg

@Joe Stocker   thank you. I also found this...

 

"After a user is deleted from the organization's Active Directory, Azure ATP automatically deletes the user profile and any related network activity within a year."

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-privacy-compliance

Hi,

If anyone found how long logs are retained in Azure ATP, I'm interested in the answer.

 

@Naturel_Dragon  I m interested too