DNS Request detection in defender ATP

%3CLINGO-SUB%20id%3D%22lingo-sub-1833314%22%20slang%3D%22en-US%22%3EDNS%20Request%20detection%20in%20defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1833314%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20cisco%20umbrella%20in%20endpoints%20as%20well%20as%20defender%20ATP.%20when%20we%20compare%20the%20results%3CBR%20%2F%3Edefender%20atp%20recorded%20the%20dns%20request%20only%20once%20where%20as%20umbrella%20recorded%20the%20count%20as%20100.%20can%20any%20one%20provide%20some%20insight%20on%20this.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1833314%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDefender%20Advanced%20Threat%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Edefender%20atp%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDefender%20AV%20Endpoint%20security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDNS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDNS%20Mapping%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

We have cisco umbrella in endpoints as well as defender ATP. when we compare the results
defender atp recorded the dns request only once where as umbrella recorded the count as 100. can any one provide some insight on this. 

0 Replies