diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md
index 85e190979f..eeacc23eda 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/gov.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md
@@ -91,10 +91,10 @@ Defender for Endpoint GCC High specific | `winatp-gw-usgt.microsoft.com`
`win
## API
Instead of the public URIs listed in our [API documentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/apis-intro), you'll need to use the following URIs:
-Environment | Login endpoint | Defender for Endpoint API endpoint
+Environment | Login endpoint | Defender for Endpoint API endpoint | SIEM API endpoint
:---|:---|:---
-GCC | `https://login.microsoftonline.com` | `https://api-gcc.securitycenter.microsoft.us`
-GCC High | `https://login.microsoftonline.us` | `https://api-gov.securitycenter.microsoft.us`
+GCC | `https://login.microsoftonline.com` | `https://api-gcc.securitycenter.microsoft.us` | Rolling out
+GCC High | `https://login.microsoftonline.us` | `https://api-gov.securitycenter.microsoft.us` | `https://wdatp-alertexporter-us.securitycenter.windows.us`