Forum Discussion

prashanth's avatar
prashanth
Copper Contributor
May 29, 2024

How to change branding for Defender alerts?

Hey all, 

 

Would someone be able to share the steps for changing the branding for these alerts?

 

Rather than "Your administrator has blocked this action," Defender is currently alerting that "ABC has blocked this action."; ( ABC is a company )

 

I've attached the snippet for the same. 

Thanks,

 

  • rahuljindal-MVP's avatar
    rahuljindal-MVP
    Bronze Contributor
    May 29, 2024
    I don’t think you can modify the default format. However, using log analytics, logic apps and Defender graph api, you can create your own alerting workflow.

Resources