Microsoft Defender Threat Intelligence — All you need to get started with the Free Experience!

Since Microsoft Ignite 2023, Microsoft Defender Threat Intelligence has had a “Free Experience” — something you have to be aware if operating Defender XDR. Let’s talk about it.

What’s Microsoft Defender Threat Intelligence

Also known as “MDTI”, Microsoft Defender Threat Intelligence is a threat intelligence product from Microsoft.

It’s spun from an expanded dataset from the acquisition of RiskIQ a couple years back (Microsoft is buying cloud cybersecurity company RiskIQ (engadget.com))

It’s interfaces includes the usual, expected methods: Web portal and via API, if needed.

What datasets are included in MDTI?

Well, as this lengthy official blog reports, a lot. This learn page gets in more details: Microsoft Defender Threat Intelligence (Defender TI) Data Sets | Microsoft Learn

Multiple Plans?

Not really. The announced free experience is just that, a free experience of MDTI for…