Forum Discussion
jjsantanna
Oct 21, 2021Brass Contributor
Can I check whether an IoC/hash is already monitored by MDE?
The list of IoC is limited to 15k. I imagine some IoCs entries from our "custom list" are already monitored by Microsoft/MDE. So, is there a way to check whether there is a detection rule for a speci...
Daniel Simpson
Microsoft
Oct 21, 2021Good question. Let me follow up on this for you. Will reply soon.
- Thomas_DoucetteOct 28, 2021Former Employee
jjsantanna you can use this API to check the determination on a file hash: File resource type | Microsoft Docs.
Hopefully this helps! 🙂
- AnonymousSep 28, 2022Problem is, how would you implement it to check "thousands" of entries?