Microsoft Defender for Endpoint export function now decreased?

Copper Contributor

Good afternoon everyone,

 

Could someone please comment if they are experiencing the same problem as myself.

Whenever now I am trying to export Vulnerabilities (CVE's from Defender Portal) it seems now the extract is limited to 8000 entries, although this figure used to be 10,000 according to the following article.

 

Export incidents queue to CSV files - Microsoft Defender XDR | Microsoft Learn

 

Now only since this month , when I am trying to create reports for our customer this is only showing me 8000 entries in the exported excel where the dashboard shows results even higher than 8000.

 

This new limit which I presume has been introduced by Microsoft is not enough for our reporting and I need an urgent solution.


Setting additional filters is still not possible since for example high category vulns over 90 days are still over the 8000 threshold . This would not have been a problem with the 10,000 entry limit.

 

Anyone can confirm this is the same for them , or offer a workaround?

 

Thanks in advance.

kind regards,

Ian 

0 Replies