There’s some information here on how Defender approaches this (processing data, nothing specific to Zeek) and which talks about the scale — many petabytes of da

There’s some information here on how Defender approaches this (processing data, nothing specific to Zeek) and which talks about the scale — many petabytes of data and trillions of datapoints. https://customers.microsoft.com/en-us/story/1540745195786192446-microsoft-other-unsegmented-azure-en-united-states https://customers.microsoft.com/en-us/story/1540745195786192...