Defender ATP PowerBI reports in Advanced features (preview)

%3CLINGO-SUB%20id%3D%22lingo-sub-1015030%22%20slang%3D%22en-US%22%3EDefender%20ATP%20PowerBI%20reports%20in%20Advanced%20features%20(preview)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1015030%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%20I'm%20trying%20to%20create%20a%20Defender%20ATP%20Dashboard%20for%20PowerBI%20from%20the%20Defender%20ATP%20Security%20Center%20portal%20or%20directly%20from%20PowerBI%20portal%2C%20as%20described%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fpowerbi-reports%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E%20(I%20have%20assigned%20to%20my%20Azure%20account%20a%20PowerBI%20Pro%20license).%3C%2FP%3E%3CP%3EIn%20the%20first%20case%20nothing%20happens%20after%20redirection%20to%20PowerBI%20portal.%3C%2FP%3E%3CP%3EIn%20the%20second%20case%20no%20result%20are%20found%20for%26nbsp%3B%3CSPAN%3EMicrosoft%20Defender%20Advanced%20Threat%20Protection%3C%2FSPAN%3E%20app%20(neither%20%3CSPAN%3EWindows%20Defender%20Advanced%20Threat%20Protection%3C%2FSPAN%3E).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20this%20faeture%20still%20available%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EDavide%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1092502%22%20slang%3D%22en-US%22%3ERe%3A%20Defender%20ATP%20PowerBI%20reports%20in%20Advanced%20features%20(preview)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1092502%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F266146%22%20target%3D%22_blank%22%3E%40DavideB%3C%2FA%3EI%20have%20the%20same%20issue.%20The%20option%20in%26nbsp%3BMicrosoft%20Defender%20Security%20Center%20(PowerBI%20Reports)%20just%20redirects%20to%20a%20PowerBI%20Get%20Data%20page%20(%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fapp.powerbi.com%2Fgroups%2Fme%2Fgetdata%2Fservices%2Fwindows-defender%3Fcpcode%3DWindowsDefenderAdvancedThreatProtection%26amp%3BgetDataForceConnect%3Dtrue%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fapp.powerbi.com%2Fgroups%2Fme%2Fgetdata%2Fservices%2Fwindows-defender%3Fcpcode%3DWindowsDefenderAdvancedThreatProtection%26amp%3BgetDataForceConnect%3Dtrue%3C%2FA%3E%3C%2FFONT%3E).%20There%20is%20no%20option%20to%20create%20a%20Microsoft%20Defender%20PowerBI%20Dashboard.%3CBR%20%2F%3E%3CBR%20%2F%3EThere%20used%20to%20be%20an%20app%2C%20but%20that%20has%20disappeared%20somehow%3A%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F163906iD79CC00E7B74B4E4%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22MDATP.png%22%20title%3D%22MDATP.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1092529%22%20slang%3D%22en-US%22%3ERe%3A%20Defender%20ATP%20PowerBI%20reports%20in%20Advanced%20features%20(preview)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1092529%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%3EThe%20link%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fpowerbi-reports%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Fpowerbi-reports%3C%2FA%3E%20shows%20that%20this%20option%20is%20deprecated%20and%20that%20you%20should%20use%20Microsoft%20Defender%20ATP%20APIs%20now.%20However%2C%20this%20procedure%20seems%20to%20be%20far%20more%20complex%20and%20it%20looks%20like%20PowerBI%20Desktop%20is%20mandatory%20%3B-(%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1093868%22%20slang%3D%22en-US%22%3ERe%3A%20Defender%20ATP%20PowerBI%20reports%20in%20Advanced%20features%20(preview)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1093868%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F38941%22%20target%3D%22_blank%22%3E%40Gertjan%20Jongeneel%3C%2FA%3E%2C%20clearly%20the%20documentation%20page%20has%20been%20updated%20recently.%3C%2FP%3E%3CP%3EDavide%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi All, I'm trying to create a Defender ATP Dashboard for PowerBI from the Defender ATP Security Center portal or directly from PowerBI portal, as described here (I have assigned to my Azure account a PowerBI Pro license).

In the first case nothing happens after redirection to PowerBI portal.

In the second case no result are found for Microsoft Defender Advanced Threat Protection app (neither Windows Defender Advanced Threat Protection).

 

Are this faeture still available?

 

Regards

Davide

3 Replies
Highlighted

@DavideBI have the same issue. The option in Microsoft Defender Security Center (PowerBI Reports) just redirects to a PowerBI Get Data page (https://app.powerbi.com/groups/me/getdata/services/windows-defender?cpcode=WindowsDefenderAdvancedTh...). There is no option to create a Microsoft Defender PowerBI Dashboard.

There used to be an app, but that has disappeared somehow:

 

MDATP.png

Highlighted

The link https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/powerbi-r... shows that this option is deprecated and that you should use Microsoft Defender ATP APIs now. However, this procedure seems to be far more complex and it looks like PowerBI Desktop is mandatory ;-( 

Highlighted

Thank you @Gertjan Jongeneel, clearly the documentation page has been updated recently.

Davide