Default Version 2.1.1
October 15, 2026
Microsoft 365 Defender
This app integrates with Microsoft 365 Defender to execute various generic and investigative actionsBuilt by Splunk LLC
Compatibility
SOAR On-Prem, SOAR Cloud
Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0
Rating
0(0)
Log in to rate this app
Support
Splunk Supported
Ranking
#25 in Endpoint
This app integrates with Microsoft 365 Defender to execute various generic and investigative actions
Supported actions
- test connectivity: test connectivity
- on poll: on poll
- create comment: Create a comment for an alert
- list alerts: Get the list of recent alerts
- get alert: Retrieve the properties and relationships of an alert object
- list incidents: Get the list of recent incidents
- get incident: Retrieve the properties and relationships of an incident object
- make request: make request
- run query: An advanced search query
- update alert: Update the properties of an alert object
- update incident: Update the properties of an incident object
Categories
Endpoint
Created by
Splunk LLC
Source code
Type
connector
Downloads
17,378
Splunk Answers
Resources
Log in to report this app listing.