Start consuming Windows Defender ATP alerts data on IBM QRadar SIEM
Published Oct 09 2018 11:24 PM 5,845 Views
Microsoft

Hi Everyone,

We’re very excited to share that IBM QRadar has released an adapter for Windows Defender Advanced Threat Protection. IBM QRadar now joins the list of security event and incidents management (SIEM) solutions that can consume Windows Defender ATP alerts data, alongside ArcSight and Splunk. 

For more information about connecting Windows Defender ATP to IBM QRadar, see: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/enable-siem...

 

Thanks,

Windows Defender ATP Team

Version history
Last update:
‎Oct 09 2018 11:24 PM
Updated by: