Microsoft Defender for Endpoint

Applies to: Microsoft Defender for Endpoint

Overview

Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats.

Netsurion monitors events from the Microsoft Defender for Endpoint. Dashboard and reports in Netsurion's threat protection platform, EventTracker, will help you track, alert information, and alert evidence with help to detect file-less attacks, backdoor drops, and virus/malware.

Netsurion Knowledge Pack for Microsoft Defender for Endpoint allows you to monitor the following components: 

• Security: Information related to the alerts triggered by Microsoft Defender.

1.  
2.  
3.  
4.  
5.  

Previous Next

After the events are received into EventTracker, the alerts, reports, and dashboards can be configured into EventTracker.

Scope

The configuration details are consistent with EventTracker version 9.3 and later, and Microsoft Defender for Endpoint.

Documentation

To configure Microsoft Defender for Endpoint to send logs to EventTracker, refer to the How-to Guide.

For more information please refer to the Integration Guide.

Download Microsoft Defender for Endpoint integrator 1.0.0.