We're happy to share that the Splunk-supported Splunk Add-on for Microsoft Security is now available. This add-on maps the Microsoft Defender for Endpoint Alerts API properties or the Microsoft 365 D...
Updated Jul 11, 2023
Version 2.0
Blog Post
Hi there,
Can the add-on filter by Defender device groups?
We have regional data privacy issues so we can only collect data into Splunk for a specified Defender device group.
Thanks.