The Microsoft Defender portal
The Microsoft Defender portal is a unified portal that provides protection, detection, investigation, and response regarding email, collaboration, identity, and device threats. The Microsoft Defender portal provides you with quick access to information presented in a simple layout that combines related information for easier use. The Microsoft Defender portal helps you respond to attacks by bringing information into a set of unified experiences for:
- Incidents & alerts
- Hunting
- Action center
- Threat analytics
Unified investigations
The Microsoft Defender portal combines resources from multiple data sources to provide a complete view of security in your organization.
When you select an incident name, it displays a page showing an incident from multiple sources.
Improved processes
Common controls appear in the same place or are condensed into one feed of data, for example, unified settings.
Threat analytics
The Microsoft Defender portal provides a view of threat-related incidents. These incidents are aggregate into an end-to-end attack story that encompasses multiple threat vectors from Microsoft Defender for Endpoint and Microsoft Defender for Office 365, which can simplify and speed up your investigation.
Note
The use of Microsoft Defender for Endpoint and Microsoft Defender for Office 365 data requires an appropriate license, and both services have been deployed.