Overview
The Microsoft Defender Threat Intelligence (Defender TI) platform allows users to develop private personal or team project types for organizing indicators of interest and indicators of compromise from an investigation. Projects contain a listing of all associated artifacts and a detailed history that retains the names, descriptions, collaborators, and monitoring profiles. Users can create a project in two ways: through the Projects Home Page or while investigating results. Once a user has created projects, they can manage them inside the Projects portion of the platform. Defender TI Premium users can also share and collaborate on projects if they are assigned to the same tenant. For more information, see Using projects.
Figure 1 – Defender TI Projects Home Page