Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Is it safe to disable the 'Microsoft Defender for Endpoint' connector in Sentinel

Copper Contributor

We recently noticed that the 'Microsoft Defender for Endpoint' connector is no longer sending logs to Sentinel instances for the clients we manage. 
These now seem to be forwarded through the 'Microsoft 365 Defender (Preview)' connector.
However, I am seeing Sentinel instances where the 'Microsoft 365 Defender (Preview)' connector has not been enabled still receiving MDE logs.

I was wondering if it is safe to enable the 'Microsoft 365 Defender (Preview)' connector and disable the 'Microsoft Defender for Endpoint' connector or if that would affect the log forwarding ? 

 

Regards,

Princely Dmello 

0 Replies