Microsoft Defender ATP : Web Protection

%3CLINGO-SUB%20id%3D%22lingo-sub-2168459%22%20slang%3D%22en-US%22%3EMicrosoft%20Defender%20ATP%20%3A%20Web%20Protection%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2168459%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20created%20the%20Indicators%20with%20URLS%20which%20should%20alert%20us%20when%20ever%20users%20access%20respective%20URL's.%3C%2FP%3E%3CP%3EWe%20could%20see%20it%20in%20%22%20Observed%20in%20organization%22%20section%20when%20any%20user%20hits%20the%20URL%20but%20it%20is%26nbsp%3B%20not%20coming%20in%20alert%20section.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PRAYA95_0-1614337403964.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F258323i591AA09DF1E06A0E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22PRAYA95_0-1614337403964.png%22%20alt%3D%22PRAYA95_0-1614337403964.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENote%20%3A%20Followed%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Findicator-ip-domain%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmicrosoft-defender-atp%2Findicator-ip-domain%3C%2FA%3E%26nbsp%3Bfor%20configuring%20this%20feature.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

We have created the Indicators with URLS which should alert us when ever users access respective URL's.

We could see it in " Observed in organization" section when any user hits the URL but it is  not coming in alert section.

PRAYA95_0-1614337403964.png

 

Note : Followed https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/indicator... for configuring this feature.

0 Replies