Forum Discussion
Possible to schedule/automate advanced hunting queries in defender?
As the subject says, is it possible to schedule queries to run within the MDE portal?
- https://docs.microsoft.com/en-us/microsoft-365/security/defender/custom-detection-rules?view=o365-worldwide
You can create custom detection rules for this.
- https://docs.microsoft.com/en-us/microsoft-365/security/defender/custom-detection-rules?view=o365-worldwide
You can create custom detection rules for this.- I saw that when I was researching but didn't think it fit my use case. Upon further reading I see they can run at specified intervals. That's perfect thanks for posting!
