Forum Discussion

kylemiller061's avatar
kylemiller061
Brass Contributor
Apr 15, 2020
Solved

MDATP Full Telemetry Ingestion

I noticed from a previous post (way back in September) that the MDATP streaming api  was being assessed for possible integration with Sentinel. Is there any update to the possibility of this happenin...
apis
integration
microsoft defender for endpoint
  • Ely_Abramovitch's avatar
    Ely_Abramovitch
    Apr 16, 2020

    Hi kylemiller061

     

    I'm Ely from the product group.

    Getting MDATP data to Sentinel is indeed part of our roadmap and planned for the next few month

     

    Thanks,

kylemiller061's avatar
kylemiller061
Brass Contributor
Apr 15, 2020

Thijs Lecomte I understand that it would potentially be quite expensive, and it certainly wouldn't be meant for everyone. I have seen the use of the CrowdStrike Data Replicator API with Splunk, and Red Canary has done fantastic work with Carbon Black data on the Splunk platform as well. It would be nice to have the ability to have MTP type cross product investigative/fusion capabilities within Sentinel with MDATP data.

Ely_Abramovitch's avatar
Ely_Abramovitch
Former Employee
Apr 16, 2020

Hi kylemiller061

 

I'm Ely from the product group.

Getting MDATP data to Sentinel is indeed part of our roadmap and planned for the next few month

 

Thanks,

Resources