Forum Discussion

Dean_Gross's avatar
Dean_Gross
Silver Contributor
Feb 20, 2022

Unsupported categories - M365 Defender Connector

Does anyone know why I would get the following error when configuring M365 Defender (Preview) connector?
Categories AdvancedHunting-EmailAttachmentInfo, AdvancedHunting-EmailEvents, AdvancedHunting-EmailUrlInfo, AdvancedHunting-EmailPostDeliveryEvents are not supported

  • jwcarter's avatar
    jwcarter
    Copper Contributor
    I think I figure the error message, it looks like you need to have either one of these three license:
    Defender for Office 365 Plan 1, Defender for Office 365 Plan 2 or Microsoft 365 A5/E5/F5/G5 Security. These plans allow for Advanced hunting, which your error message is saying is not supported.
  • Jiri_PAVLIK's avatar
    Jiri_PAVLIK
    Copper Contributor

    i am awaiting root cause for that too. 

    getting it on one of tenants. Another was OK. 

    Licensing + PreReq = OK

    • jwcarter's avatar
      jwcarter
      Copper Contributor
      Same error message with me, my license and Prerequisites are all in accordance with Microsoft.
  • mwirtz3's avatar
    mwirtz3
    Copper Contributor

    Dean_Gross I'm receiving the same error when enabling the Defender for Office 365 logs via the Microsoft 365 Defender connector. Any chance you found a solution to this issue?

Resources