Skip to main content Link Search Menu Expand Document (external link)

Microsoft Defender ATP

Table of contents
  1. Configuring a Microsoft EP Plugin
  2. Obtain credentials from Mircrosft
  3. Provide credential JSON file to Fluency

Configuring a Microsoft EP Plugin

This is configured in the back-end only.

Obtain credentials from Mircrosft

The MSSP (App ID + Tenant ID) credential set is required

MSSP - This is asking for an Application ID and Tenant ID.

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-siem-integration

Provide credential JSON file to Fluency

The plugin will be enabled from the backend with the json config file