Forum Discussion

rsb47546's avatar
rsb47546
Icon for Microsoft rankMicrosoft
Oct 08, 2023

M365 Defender connector

Hi,   Am I right in my understanding that if I have the M365 Defender connector enabled in Sentinel, can I disable the component connectors (MDI, MDE, MDO, MDCA) since M365 defender is already in...
siem
Usama_Saleem's avatar
Usama_Saleem
Brass Contributor
Oct 08, 2023
So you want to see only Microsoft 365 connector as 'Connected' not the other component connectors? Am I getting it right?
  • rsb47546's avatar
    rsb47546
    Icon for Microsoft rankMicrosoft
    Oct 09, 2023
    My question is if I really need the other component connectors enabled if I have the M365 Defender connector enabled. Am I not getting duplicate data if I have all of them enabled.
    • Usama_Saleem's avatar
      Usama_Saleem
      Brass Contributor
      Oct 09, 2023
      I don't think so there will be any duplication because other component connectors only having ingestion in SecurityAlert table.