Latest Version 1.5.1
December 5, 2025
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
Microsoft 365 Defender
This app integrates with Microsoft 365 Defender to execute various generic and investigative actions
Built by
Compatibility
Not Available
Platform Version: 7.1, 7.0, 6.4, 6.3
Rating
0
(0)
Log in to rate this app
Support
Splunk Supported connector
Ranking
#25
in Endpoint
This app integrates with Microsoft 365 Defender to execute various generic and investigative actions
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- on poll: Callback action for the on_poll ingest functionality
- run query: An advanced search query
- list incidents: List all the incidents
- list alerts: List all the alerts
- get incident: Retrieve specific incident by its ID
- update incident: Update the properties of an incident object
- get alert: Retrieve specific alert by its ID
- update alert: Update properties of existing alert
Categories
Created By
Splunk LLC
Source Code
microsoft365defender(Opens new window)Type
connector
Downloads
12,697
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing