Microsoft Defender API - File Block indicator feature is not available for this tenant
Jose Garcia
1
Reputation point
While trying to automate the ingestion of Threat Intel into Microsoft Defender I ran across this while using the API.
"error":{"code":"DisabledFeature","message":"File Block indicator feature is not available for this tenant"...
Haven't had any issues with other indicator types. I have made sure that "Allow or Block file", "Microsoft Defender for Cloud Apps" and "Custom network indicators" are both enabled in the settings.
What am I missing here?
Sign in to answer