How to change branding for Defender alerts?

Copper Contributor

Hey all, 


Would someone be able to share the steps for changing the branding for these alerts?


Rather than "Your administrator has blocked this action," Defender is currently alerting that "ABC has blocked this action."; ( ABC is a company )


I've attached the snippet for the same. 




1 Reply
I don’t think you can modify the default format. However, using log analytics, logic apps and Defender graph api, you can create your own alerting workflow.