Defender ATP Multiple questions (Rules/Definitions list, indicators, advanced hunting)

  • Thread starter Thread starter Chaturvedula
  • Start date Start date
C

Chaturvedula

Guest
Hello,

1) Is it possible to get(read) the list of active defender rules/definitions? For example, the list of all file hashes that defender checks for? Or all the malware/virus samples defender already has protection for. I can search from the securitycenter but doing for each individual case is cumbersome.


2) What is difference between adding an IOC to "Rules -> Indicators" and checking for the same through an advanced hunting query ?


Thanks.

More...
 
Back
Top