Forum Discussion

Sohel68's avatar
Sohel68
Copper Contributor
May 11, 2021

How to import bulk indicators to Microsoft defender security center

Hello, 

I'm new in Microsoft, 

I'm trying to import IoC's using a CSV file to "Microsoft Defender Security Center -> Indicators".

I know how to do a single hash, but I'm looking for bulk import. sample file is not very hlepful.

Any suggestions!!

 

Thanks.

 

 

 

 

 

  • hmunoz_rbi's avatar
    hmunoz_rbi
    Copper Contributor

    Hi Sohel68,

     

    I just went through this process this morning. In the same page where you add the single entry by selecting "Add Item", you'll find to the left the option "Import", this will give you the option to upload a CSV file with all the entries you want and the important part, is that you'll find, at the bottom of the side window that opened, a Download sample CSV file.

     

    The file by itself is pretty descriptive, but in the documentation page you will also find which fields are required/optional.

     

    Hope this helps.

Resources