%3CLINGO-SUB%20id%3D%22lingo-sub-1833314%22%20slang%3D%22en-US%22%3EDNS%20Request%20detection%20in%20defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1833314%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20cisco%20umbrella%20in%20endpoints%20as%20well%20as%20defender%20ATP.%20when%20we%20compare%20the%20results%3CBR%20%2F%3Edefender%20atp%20recorded%20the%20dns%20request%20only%20once%20where%20as%20umbrella%20recorded%20the%20count%20as%20100.%20can%20any%20one%20provide%20some%20insight%20on%20this.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1833314%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDefender%20Advanced%20Threat%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Edefender%20atp%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDefender%20AV%20Endpoint%20security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDNS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDNS%20Mapping%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2237850%22%20slang%3D%22en-US%22%3ERe%3A%20DNS%20Request%20detection%20in%20defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2237850%22%20slang%3D%22en-US%22%3EDefender%20ATP%20KQL%20query%20please.%20(seem%20to%20be%20working%20on%20same%20thing)%3C%2FLINGO-BODY%3E

Discussion Options

Subscribe to RSS Feed
Mark Discussion as New
Mark Discussion as Read
Pin this Discussion for Current User
Bookmark
Subscribe
Printer Friendly Page

DefenderEnthusiast

Occasional Visitor

‎Oct 29 2020 09:07 AM

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Email to a Friend
Report Inappropriate Content

‎Oct 29 2020 09:07 AM

DNS Request detection in defender ATP

We have cisco umbrella in endpoints as well as defender ATP. when we compare the results
defender atp recorded the dns request only once where as umbrella recorded the count as 100. can any one provide some insight on this.

Labels: