Tech Community Live: Endpoint Manager edition
Jul 21 2022, 08:00 AM - 12:00 PM (PDT)

[EDR] Expedite telemetry reporting frequency

%3CLINGO-SUB%20id%3D%22%5C%26quot%3Blingo-sub-3147549%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%5BEDR%5D%20Expedite%20telemetry%20reporting%20frequency%26lt%3B%5C%2Flingo-sub%26gt%3B%3CLINGO-BODY%20id%3D%22%5C%26quot%3Blingo-body-3147549%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CP%3EHi%2C%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3EDoes%20anybody%20know%20%3CSTRONG%3Ewhat%20and%20how%20often%20is%20being%20sent%26lt%3B%5C%2FSTRONG%26gt%3B%20according%20to%20this%20option%20-%26nbsp%3BExpedite%20telemetry%20reporting%20frequency%20-%20in%20EDR%20settings%3F%20I%20couldn't%20find%20anything%20about%20it%20in%20%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fprotect%2Fendpoint-security-edr-profile-settings%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnoopener%20nofollow%20noopener%20noreferrer%22%20noreferrer%3D%22%22%3Edocumentation%26lt%3B%5C%2FA%26gt%3B.%26lt%3B%5C%2FP%26gt%3B%3C%2FA%3E%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22%5C%26quot%3Blia-inline-image-display-wrapper%22%20lia-image-align-inline%3D%22%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Fgxcuf89792%2F%5C%26quot%3Bhttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F346955iF066B25C2A59A1BE%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%5C%26quot%3B%22%20role%3D%22%5C%26quot%3Bbutton%5C%26quot%3B%22%20title%3D%22Przem0_0-1644479230771.png%22%20alt%3D%22%5C%26quot%3BPrzem0_0-1644479230771.png%5C%26quot%3B%22%20%2F%3E%26lt%3B%5C%2Fspan%26gt%3B%26lt%3B%5C%2FP%26gt%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ERgds%2C%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3EPrzem0%26lt%3B%5C%2FP%26gt%3B%26lt%3B%5C%2Flingo-body%26gt%3B%3CLINGO-LABS%20id%3D%22%5C%26quot%3Blingo-labs-3147549%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CLINGO-LABEL%3EIntune%26lt%3B%5C%2Flingo-label%26gt%3B%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%26lt%3B%5C%2Flingo-label%26gt%3B%26lt%3B%5C%2Flingo-labs%26gt%3B%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3C%2FLINGO-SUB%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3147549%22%20slang%3D%22en-US%22%3E%5BEDR%5D%20Expedite%20telemetry%20reporting%20frequency%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3147549%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EDoes%20anybody%20know%20%3CSTRONG%3Ewhat%20and%20how%20often%20is%20being%20sent%3C%2FSTRONG%3E%20according%20to%20this%20option%20-%26nbsp%3BExpedite%20telemetry%20reporting%20frequency%20-%20in%20EDR%20settings%3F%20I%20couldn't%20find%20anything%20about%20it%20in%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fprotect%2Fendpoint-security-edr-profile-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Edocumentation%3C%2FA%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Przem0_0-1644479230771.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F346955iF066B25C2A59A1BE%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Przem0_0-1644479230771.png%22%20alt%3D%22Przem0_0-1644479230771.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ERgds%2C%3C%2FP%3E%3CP%3EPrzem0%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3147549%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Senior Member

Hi,

Does anybody know what and how often is being sent according to this option - Expedite telemetry reporting frequency - in EDR settings? I couldn't find anything about it in documentation.

 

Przem0_0-1644479230771.png

 

Neither here.

 

Configuration/TelemetryReportingFrequency

Added in Windows 10, version 1703. Returns or sets the Windows Defender Advanced Threat Protection diagnostic data reporting frequency.

The following list shows the supported values:

  • 1 (default) – Normal
  • 2 - Expedite

 

 

What are Normal and Expedite standing for?

 

Rgds,

Przem0

0 Replies