Forum Discussion
Zivosh
Nov 06, 2025Copper Contributor
Unified detection rule management
Hi,
I attended the webinar yesterday regarding the new unified custom detection rules in Defender XDR. I was wondering about the management of a library of rules.
As with any SOC, our solution has a library of custom rules which we manage in a release cycle for a number of clients in different Tenants. To avoid having to manage rules individually we use the JSON approach, importing the library so it will update rules that we need to tune.
Currently I'm not seeing an option to import unified detection rules in Defender XDR via JSON. Is that a feature that will be added?
Thanks
Ziv
No RepliesBe the first to reply