Microsoft Defender XDR integration

Thanks @Ben_T  for your response,

Yes, I noticed these integrations are available in the marketplace. However, I was specifically looking for an integration tailored to Microsoft Defender XDR. I couldn’t find one for XDR, so I was wondering if any of the available Defender integrations also cover XDR?

I'm not a Microsoft expert, but my understanding is that Microsoft XDR is a broader security platform that extends visibility and context across attack surfaces/products like Microsoft Defender for Endpoint(ATP) and Microsoft Defender for Office 365.

Think of it this way:

• MDE is like a security guard protecting a single building (your endpoints).
• Microsoft XDR is like a network of security cameras and sensors monitoring the entire city (endpoints, email, etc), with MDE being one of the cameras focused on a crucial area.

Hey,

you can use ATP and 365 for this or if you have also Azure Sentinel active you could transfer all alerts to Sentinel and then to SOAR that works with analytic rules from Sentinel and the default Rules from Defender ATP / Defender for Endpoint.

Then you just need a playbook that handle the different Detection Source or the Incident from Azure Sentinel.

Regards,