Forum Discussion
Microsoft 365 Defender into Sentinel
I've just started to look at onboarding devices into 365 Defender via the script provided and all works great. We do use an independent anti-virus product but I like the additional telemetry associat...
Hi,
I did spot that but I just wanted to know that if we onboarded lots of devices into Microsoft 365 Defender for Endpoint would our sentinel costs spiral out of control.
Saying that I was just trying to get a bit more info on this and it looks like to use the Microsoft 365 Defender for Endpoint connector in Sentinel anyway you need to have an E5 licence.
We predominantly use E3's so I guess I can onboard away as the data shouldn't end up in Sentinel anyway if that's the case.
Sentinel Cost is about the amount of data ingested and the period of retention and not number of devices onboarded in MDE