April 7, 2025—You can now include Microsoft Defender for Endpoint logs in custom filters
and models to enhance your organization’s event detection capabilities and Workbench
alert generation, providing you with even more comprehensive security insights.
For more information, see Configure a custom model.