Alexandra_Roland

Managing MDTI Premium licenses in Microsoft Entra Admin Center

This blog details how to assign and manage Defender Threat Intelligence (MDTI) licenses and contains links to helpful content and resources. It is intended for customers who recently purchased the MDTI Premium SKU or a SKU that enables MDTI Premium access for its user base, such as Copilot for Security. Global administrators or identity governance […]

Managing MDTI Premium licenses in Microsoft Entra Admin Center Continue Reading

MDTI Adds Microsoft Threat Intelligence to Silobreaker

We are pleased to announce Microsoft Defender Threat Intelligence (MDTI)’s powerful new integration with Silobreaker. Silobreaker produces a reputation score for indicators of compromise (IOCs) based on a variety of open and commercial intelligence sources. Silobreaker users can now also access MDTI’s rich reputation scoring against IOCs, specifically IP addresses and domains, using Silobreaker’s 360

MDTI Adds Microsoft Threat Intelligence to Silobreaker Continue Reading

Become a Microsoft Defender Threat Intelligence Ninja: The complete level 400 training

Welcome to Microsoft Ninja training! This blog post will walk you through Microsoft Defender Threat Intelligence (MDTI) level 400 training and help you become an MDTI master. [embedded content] Curriculum   This program is comprised of fourteen training modules that will enable users to get to know and get the most out of their MDTI instance.

Become a Microsoft Defender Threat Intelligence Ninja: The complete level 400 training Continue Reading

What’s in a Defender TI Web Crawl?

Content originally authored by Brandon Dixon, Microsoft Partner of Product Management, on May 10, 2016.  Did you know that Microsoft crawls the internet’s web pages daily- to 2 billion HTTP requests daily?! For this reason, Defender TI users can leverage derived datasets such as Trackers, Components, Host Pairs, and Cookies during their investigations. Microsoft’s web crawling

What’s in a Defender TI Web Crawl? Continue Reading

Introducing the Microsoft Defender Threat Intelligence Community

Microsoft Defender Threat Intelligence (MDTI) is a complete threat intelligence platform that enables security professionals to ingest, analyze and act upon massive signal collected from across the internet, processed by security experts and machine learning. It allows users to uncover and understand their organization’s external attack surface, including context around vulnerabilities and the tools and

Introducing the Microsoft Defender Threat Intelligence Community Continue Reading

Understanding and Using Finished Threat Intelligence

Overview Threat intelligence is the data organizations need to map threats to the enterprise and enable the best possible decision-making related to risk. Microsoft Defender Threat Intelligence (Defender TI) serves as a valuable source of attack surface threat intelligence on global, industry, and local threats, with content from hundreds of OSINT sources complementing original research,

Understanding and Using Finished Threat Intelligence Continue Reading

Getting the Most Out of Projects in Defender TI

Overview The Microsoft Defender Threat Intelligence (Defender TI) platform allows users to develop private personal or team project types for organizing indicators of interest and indicators of compromise from an investigation. Projects contain a listing of all associated artifacts and a detailed history that retains the names, descriptions, collaborators, and monitoring profiles. Users can create

Getting the Most Out of Projects in Defender TI Continue Reading

Using Reputation and Analyst Insights Features For Quick Indicator Assessments

Reputation The power of machine learning models comes from the data that is used to train them, and Defender TI’s vast Internet telemetry is powering models that allow us to define the criteria that factor into reputation scores for IP addresses, domains, and hostnames across the Internet. These scores are meant to indicate the likelihood

Using Reputation and Analyst Insights Features For Quick Indicator Assessments Continue Reading

Microsoft Defender Threat Intelligence Overview, Concepts, and Vocabulary

Overview If you are wondering what Microsoft Defender Threat Intelligence (Defender TI) is and who should use it, you’ve come to the right place! Defender TI is an analyst workbench aggregating many intelligence data sources in a way that is searchable and pivotable. Pivotable is the adjective form of pivot. Merriam-Webster defines pivot as turning on

Microsoft Defender Threat Intelligence Overview, Concepts, and Vocabulary Continue Reading

Getting Started with Microsoft Defender Threat Intelligence

Getting Started Creating an Account  MDTI Standard Edition (formerly known as Community) requires users to have an Entra or personal Microsoft account. In other words, any Microsoft identity account may be used for MDTI Standard Edition access. Access our MDTI Standard Edition features by visiting our standalone portal at MDTI. For more information, see “Learn

Getting Started with Microsoft Defender Threat Intelligence Continue Reading