Submit Indicator API option missing

Copper Contributor

Hi All,

 

When running a trail of Defender I was able to submit Indicators (file hash) via API. The trail has not stopped so I have purchased some licenses for testing:

 

Microsoft Defender for Endpoint Plan 2

 

But suddenly the menu option has disappeared in Defender ( Settings > Endpoint > Indicators). Also the API calls fail due to permissions issues.

 

Is the API function and the Indicators function supported in Plan 2 as in some places it looks like it is only allowed in Plan 1 which does not make sense as I always thought Plan 2 was more functional than Plan 1.

0 Replies