Forum Discussion

GuidoImpe's avatar
GuidoImpe
Brass Contributor
Feb 26, 2025
Solved

Dynamic Blocklist in Microsoft Defender XDR

Hello Community, I have one question, and i think that is a request that could be useful to everyone. We have a Dynamic list that are published over internet in read-only (into this list we put ioc...
microsoft defender for endpoint
  • luchete's avatar
    luchete
    Feb 27, 2025

    Hi GuidoImpe,

    Currently, as far as i know, MDE and MDC don’t directly support blocking based on a dynamic blocklist (like a txt file with IOCs). You can integrate threat intelligence, but automatic blocking of dynamic IOCs in real-time would require a more manual or custom setup, such as using custom indicators in Defender or leveraging third-party solutions.

    Hope that helps!

    Regards,

luchete's avatar
luchete
Iron Contributor
Feb 27, 2025

Hi GuidoImpe,

Currently, as far as i know, MDE and MDC don’t directly support blocking based on a dynamic blocklist (like a txt file with IOCs). You can integrate threat intelligence, but automatic blocking of dynamic IOCs in real-time would require a more manual or custom setup, such as using custom indicators in Defender or leveraging third-party solutions.

Hope that helps!

Regards,

  • GuidoImpe's avatar
    GuidoImpe
    Brass Contributor
    Feb 27, 2025

    Thanks luchete for your feedback, yes i have checked and from Threat Intelligence is possibile with more customization import IOC.

    I acccept your answer as a Solution

    Regarda,

    Guido

Resources