Microsoft Defender Integration Process

Microsoft Defender Integration

While SaaS Alerts fully intends to integrate with the full Microsoft Defender suite, the initial integration supports Microsoft Defender for Endpoint. As additional features and items from the product suite are added, this KB will be updated.

Prerequisites

• A global admin account to the Microsoft tenant
• Proper Licensing to support Defender for Endpoints
• Devices enrolled and Defender deployed to them
• Microsoft Manage already connected within SaaS Alerts

Licensing for Defender for Endpoints

To access Microsoft Defender for Endpoints, you will need one of the following Microsoft 365 licenses that include Defender for Endpoint as part of their suite:

1. Microsoft 365 E5: This license includes the full range of Microsoft security features, including Microsoft Defender for Endpoints.

2. Microsoft 365 E5 Security: A subset of the E5 plan focused on advanced security features.

3. Microsoft 365 A5: Designed for educational institutions, this plan also includes Defender for Endpoints.

4. Windows 10 Enterprise E5: This includes Microsoft Defender for Endpoints specifically for Windows 10 devices.

5. Microsoft Defender for Endpoint Plan 1: This provides essential capabilities for threat and vulnerability management, attack surface reduction, and endpoint detection and response.

6. Microsoft Defender for Endpoint Plan 2: This plan offers the complete suite of endpoint protection capabilities.

For detailed and up-to-date information on licensing, it's recommended to consult the official Microsoft documentation or contact a Microsoft representative.

Add the Microsoft Defender Application within SaaS Alerts

1. Access an existing Organization, or create a new one.
2. Connect Microsoft Manage if you have not already.

3. Next click + New Application.

4. Click the Microsoft Defender icon within the available applications list.

5. Sign into Microsoft with the proper Global Admin account for the particular Microsoft tenant you would like to monitor.

6. If the credentials are correct, you will be provided with a success message. If after multiple attempts you are not able to connect Microsoft Defender, reach out to support.