By Rabia Noureen
Publication Date: 2026-10-27 13:40:00
Key Takeaways:
- Microsoft will retire the Defender Advanced Hunting APIs on February 1, 2027.
- Organizations must migrate integrations, scripts, and automations to the Microsoft Graph Security API.
- Administrators should begin inventorying dependencies and testing migrations to avoid disruptions to security operations.
Microsoft is preparing to retire the Microsoft Defender for Endpoint (MDE) Advanced Hunting API and Microsoft Defender XDR Advanced Hunting API, which will require organizations to move security integrations to the Microsoft Graph Security API before the retirement deadline. This change is part of Microsoft’s effort to consolidate security data access under a single API framework that offers broader visibility, a consistent schema, and improved scalability for security operations.
The challenge for enterprises is that existing scripts, automations, and custom integrations built on the…
