Microsoft Defender is a suite of security tools Microsoft offers as add-on licenses to extend the security capabilities of Microsoft 365. Blumira integrates with these Defender products for event logging:
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
-
Microsoft Defender for Office 365
Note: These logs come through Blumira's Microsoft 365 Cloud Connector as long as your license includes this add-on product. - Microsoft Defender for Cloud Apps
For an overview of how these products are related and the information collected through these integrations, see Getting started with Blumira's Microsoft 365 and Azure log monitoring. Otherwise, click the names above to access the configuration instructions for each.