Forum Discussion
Able to add an additional threat intelligence feeds to Microsoft Defender for Endpoint ?
Hi, Is there any way to add additional threat intelligence feeds (e.g. community threat intelligence, autofocus-hosted threat intelligence) to Microsoft Defender for Endpoint?
tay76 I believe, once you integrate with a SIEM solution you could then use additional threat intelligence feed. Azure sentinel can do this https://docs.microsoft.com/en-us/azure/sentinel/connect-threat-intelligence-tip and connecting Microsoft services to sentinel is easy. https://docs.microsoft.com/en-us/azure/sentinel/connect-microsoft-defender-advanced-threat-protection