Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Using watchlist in Defender

Silver Contributor

Is there any way to use a watchlist in any of the Defender products like we can in SentineL?

5 Replies
Hi Dean

There isn't unfortunately... I have not found a great way to have a Watchlist feature inside of MDE hunting. The only option you have now is to forward to data to Sentinel, but that's costly ofcourse
With all the changes in Defender 365, do you know if there is an option to do watchlist now?
No, I don't think so and I'm not aware of such capability. Looks like all the effort is going into the Sentinel direction.
I think there is not any capability currently available at the marketplace right now; maybe in the upcoming months there will be some advancements.