Event banner
Microsoft Defender Threat Intelligence and Sentinel integration deep dive
Event Ended
Thursday, Apr 13, 2023, 07:30 AM PDTEvent details
See how quick detection and response are vital to navigating today's fast-moving cyberattacks. We'll break down a cyberattack and show how Microsoft Defender Threat Intelligence, combined with Micros...
Trevor_Rusher
Updated Dec 27, 2024
Dean_Gross
Apr 13, 2023Silver Contributor
we are a MSSP, do we need to buy MDTI for each Sentinel workspace we monitor or is there a way to share it across multiple workspaces?
RijutaKapoor
Microsoft
Apr 13, 2023Hi Dean,
Yes the connector is a per workspace connector. You will have to enable it in all workspaces. There are ways to manage your workspaces as a MSSP that you can utilize.
https://learn.microsoft.com/en-us/azure/sentinel/multiple-tenants-service-providers
- Dean_GrossApr 13, 2023Silver ContributorThanks, but these instructions don't provide any guidance about how to work with MDTI for multiple workspaces, some guidance on this specific topic would be helpful.