Aggregated reporting in Microsoft Defender for Endpoint

January 2025

• (Preview) Aggregated reporting in Microsoft Defender for Endpoint: Aggregated reporting extends signal reporting intervals to significantly reduce the size of reported events while preserving essential event properties. This feature is available for Microsoft Defender for Endpoint Plan 2. For more information, see Aggregated reporting in Microsoft Defender for Endpoint.