MDR360 integrations · Endpoint (EDR/XDR)
DIAMATIX MDR for Microsoft Defender
Defender for Endpoint alerts and incidents are collected into SHIELD SIEM/XDR for 24/7 triage by the DIAMATIX SOC.
Technical details pending DIAMATIX confirmation
Technical overview
Integration specifications
- Category
- Endpoint (EDR/XDR)
- Availability
- Production Supported
- Ingestion method
- Microsoft security APIs
- Capabilities
- Telemetry Ingestion, Detection & Investigation
- Active response
- Awaiting technical confirmation
Telemetry collected
- Security alerts and detections
- Endpoint process and threat context
- Device and agent health
Onboarding prerequisites
- Defender for Endpoint licence (for example Plan 2 or Microsoft 365 E5)
- Entra ID app registration with read permissions
- Agreed response permissions, if active response is in scope
How it works
How DIAMATIX SecOps works with it
- 01
Collect
Microsoft Defender signals are brought into SHIELD SIEM/XDR.
- 02
Investigate
DIAMATIX analysts triage, correlate and filter alerts 24/7.
- 03
Respond
Agreed containment or guided response follows your runbook and MDR360 tier.
Scope, capabilities and response actions are confirmed for your environment during scoping.
Back to all integrationsRunning Microsoft Defender?
Tell us about your environment and we will confirm coverage for MDR360.