Forum Discussion

rsb47546's avatar
rsb47546
Icon for Microsoft rankMicrosoft
Oct 08, 2023

M365 Defender connector

Hi,   Am I right in my understanding that if I have the M365 Defender connector enabled in Sentinel, can I disable the component connectors (MDI, MDE, MDO, MDCA) since M365 defender is already in...
siem
rsb47546's avatar
rsb47546
Icon for Microsoft rankMicrosoft
Oct 09, 2023
My question is if I really need the other component connectors enabled if I have the M365 Defender connector enabled. Am I not getting duplicate data if I have all of them enabled.
Usama_Saleem's avatar
Usama_Saleem
Brass Contributor
Oct 09, 2023
I don't think so there will be any duplication because other component connectors only having ingestion in SecurityAlert table.