Forum Discussion

Kota2's avatar
Kota2
Occasional Reader
Mar 31, 2026

I would like to know the complete list of alerts whose serviceSource is MDO

Hi all

In order to determine the alerts that should be monitored by the SOC, I would like to identify, from the alerts listed at the link below, those whose serviceSource is Microsoft Defender for Office 365 (MDO).

https://learn.microsoft.com/en-us/defender-xdr/alert-policies

I couldn’t find where this is documented, no matter how thoroughly I searched, so I would appreciate it if you could point me to the relevant documentation.

 

thx

No RepliesBe the first to reply