Microsoft Defender ATP
ArchivedMicrosoft Defender ATP enables you to fetch and analyze logs from Microsoft Defender for Endpoint (previously named Microsoft Defender ATP). Logpoint aggregates and normalizes Microsoft Defender for Endpoint logs so you can analyze the information through the LP_MicrosoftDefenderATP dashboard. The dashboard visualizes the incident details for threat types, attack categories, hosts and other event details detected in your network. You can customize the dashboard to perform in-depth analysis by adjusting the data and searches.
Release Details
Microsoft Defender ATP,Microsoft Defender XDR For Director Console UI,Microsoft Defender XDR for Director Console API
Enhancements
PLUG-11799
You can now configure Microsoft Defender ATP from Log Sources , which provides a centralized user interface for all the configurations of log collection.
KB-24551
The taxonomy for Microsoft Defender ATP normalizer is mapped as follows:
-
severitytorisk_level -
detectionSourcetodetection_source -
titletoalert -
resolvedTimetoresolved_ts
Past Releases
Microsoft Defender ATP v5.2.0 ▾
Enhancements
PLUG-11799
You can now configure Microsoft Defender ATP from Log Sources , which provides a centralized user interface for all the configurations of log collection.
KB-24551
The taxonomy for Microsoft Defender ATP normalizer is mapped as follows:
-
severitytorisk_level -
detectionSourcetodetection_source -
titletoalert -
resolvedTimetoresolved_ts
Microsoft Defender ATP v5.1.1 ▾
Enhancements
KB- 21342
Added a new LP_Microsoft Defender for Endpoint search template.
Updated the query of ATP - Details and Threats Detected widgets in the LP_MicrosoftDefenderATP dashboard.
Removed the following generic and redundant alert rules: LP_MicrosoftDefenderATP Execution Detected LP_MicrosoftDefenderATP Partial Remediation LP_MicrosoftDefenderATP Initial Access Attempt Detected LP_MicrosoftDefenderATP Potentially Unwanted Software Detected LP_MicrosoftDefenderATP Defense Evasion Detected LP_MicrosoftDefenderATP Malware Detected
Microsoft Defender ATP v5.1.0 ▾
Enhancements
PLUG-860963280, 64539, 64578, 64672, 65030, 65143, 65567, 65610, 65922, 66265, 66481, 66658
Microsoft Defender ATP now supports Microsoft Defender for Endpoint API
KB-16846
The security components of Microsoft Defender ATP have been updated to support its latest upgrade.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.