Microsoft 365 Defender data source type Specifications

The following table describes the specifications for the Microsoft 365 DefenderĀ® data source type.

Table 1. Microsoft 365 Defender data source type specifications
Specification Value
Manufacturer Microsoft
Data source type Microsoft 365 Defender
Supported versions N/A
Connector type

Universal Cloud REST API

Event format JSON
Event type alerts
Automatically discovered? No
Includes identity? No
Includes custom properties? No
More information

Microsoft 365 Defender documentation (https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-defender?view=o365-worldwide)