Forum Discussion

JMSHW0420's avatar
JMSHW0420
Iron Contributor
Dec 04, 2024

RE: Microsoft Defender for Office 365 data connector

Hello, I have an issue enabling the Microsoft Defender for Office 365 settings in the Defender XDR connector for Microsoft Sentinel. The error is attached. It seems related to: Categories Advanced...
microsoft defender for office 365
DylanInfosec's avatar
DylanInfosec
Iron Contributor
Dec 05, 2024

Hi JMSHW0420 ,

unfortunately I don’t see the attached error, maybe because I’m on mobile 🤷‍♂️ but it can absolutely be related to licensing. My guess is that currently aren’t licensed for it, are you able to access those tables in Advanced Hunting or can you access the Email & Collaboration blade in the Defender portal.

 

(Licensing DfO365: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-advanced-threat-protection-service-description )

If those tables aren’t there then it’s not going to be able to connect that particular adapter of the connector.

Now if you are licensed then you may need to reinstall that connector. Had a few connectors that gave me trouble like that and in the end a reinstall did the trick. 

Best regards,

Dylan

JMSHW0420's avatar
JMSHW0420
Iron Contributor
Dec 05, 2024

Hi Dylan,

Sorry, mate, it looks like I did not attach it. Here is the attachment...

The Microsoft Defender for Office 365 settings are not available for selection. 

If the connector needs a reinstall, we are talking about the Defender XDR.

I keep you updated... 

Jason

  • DylanInfosec's avatar
    DylanInfosec
    Iron Contributor
    Jan 19, 2025

    Hey JMSHW0420 ,

    how did it end up going for you? Did it ever work out?

     

    Dylan

Resources