Microsoft Defender ATP

Configuring a Microsoft EP Plugin

This is configured in the back-end only.

Obtain credentials from Mircrosft

The MSSP (App ID + Tenant ID) credential set is required

MSSP - This is asking for an Application ID and Tenant ID.

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-siem-integration

Provide credential JSON file to Fluency

The plugin will be enabled from the backend with the json config file