Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

DNS Request detection in defender ATP

Copper Contributor

We have cisco umbrella in endpoints as well as defender ATP. when we compare the results
defender atp recorded the dns request only once where as umbrella recorded the count as 100. can any one provide some insight on this. 

1 Reply
Defender ATP KQL query please. (seem to be working on same thing)