Blogs by Ashwin

  Plan for Microsoft 365 Defender Connectors A purpose-driven user interface is provided by the Microsoft 365 security portal to mitigate threats detected by Microsoft 365 Defender whose products includes: Microsoft Defender for Endpoint Microsoft Defender for Identity Microsoft Defender for Office 365 Microsoft Cloud App Security Each of the products have a connector that is capable of sending alerts to the Security Alerts table in Sentinel. In the Microsoft 365 Defender connector only Microsoft Defender for Endpoint data is configurable currently. Connect alerts from Microsoft Defender for Office 365 Microsoft Defender for Office 365 can easily safeguard your organization against malicious threats posed by email messages, links (URL), and collaboration tools with the help of following types of ingested alerts: A potentially malicious URL click was detected Email messages containing malware removed after delivery Email messages containing phish URLs removed after delivery Email re...