Forum Discussion

techjunk's avatar
techjunk
Brass Contributor
Mar 29, 2024

Defender XDR connector

I'm confused about what I am seeing for installed connectors in Sentinel. Within "Data connectors" I have the Microsoft Defender XDR connector and it is enabled. The description is; "Microso...
content
data collection
siem
solutions
haifa23's avatar
haifa23
Copper Contributor
Mar 29, 2024

Just my understanding:
In Content hub, what you see is a solution, it includes 1 data connector, 40 analytics rule, 71 hunting query and 3 workbook.
In "Data connector", you only see the data connector. the related content in the data connecter details may be from mutiple solutions, I guess.

  • techjunk's avatar
    techjunk
    Brass Contributor
    Apr 01, 2024
    I'm not sure where the issue originated, but I installed the supposedly missing solution and it now shows when filtering on installed. I'm not sure if the connector and some of the content type was previously installed, or if there was some previous version installed, but I am no longer seeing the odd mis-matched information.