Using watchlist in Defender

%3CLINGO-SUB%20id%3D%22lingo-sub-2190354%22%20slang%3D%22en-US%22%3EUsing%20watchlist%20in%20Defender%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2190354%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20way%20to%20use%20a%20watchlist%20in%20any%20of%20the%20Defender%20products%20like%20we%20can%20in%20SentineL%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2190354%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDefender%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2193100%22%20slang%3D%22en-US%22%3ERe%3A%20Using%20watchlist%20in%20Defender%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2193100%22%20slang%3D%22en-US%22%3EHi%20Dean%3CBR%20%2F%3E%3CBR%20%2F%3EThere%20isn't%20unfortunately...%20I%20have%20not%20found%20a%20great%20way%20to%20have%20a%20Watchlist%20feature%20inside%20of%20MDE%20hunting.%20The%20only%20option%20you%20have%20now%20is%20to%20forward%20to%20data%20to%20Sentinel%2C%20but%20that's%20costly%20ofcourse%3C%2FLINGO-BODY%3E
Respected Contributor

Is there any way to use a watchlist in any of the Defender products like we can in SentineL?

1 Reply
Hi Dean

There isn't unfortunately... I have not found a great way to have a Watchlist feature inside of MDE hunting. The only option you have now is to forward to data to Sentinel, but that's costly ofcourse