Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article provides information about support for US Government customers by unified security operations services in the Microsoft Defender portal.
Feature availability
All features in Microsoft's SecOps platform that are in general availability are available in commercial and GCC High and DoD clouds.
GCC is supported with the following limitation: Advanced hunting queries that reference both Microsoft Sentinel and Microsoft Defender XDR tables aren't supported in GCC Moderate environments. If you use Search or Union * in your queries, consider replacing the * with an explicit list of tables that are limited to Microsoft Sentinel only or Defender XDR only.
Features still in preview are available only in the commercial cloud.
For more information, see:
- Microsoft Defender XDR for US Government customers
- Microsoft Sentinel feature support for Azure commercial/other clouds
Portal URLs
The following are the Microsoft Defender portal URLs for US Government customers:
- GCC: https://security.microsoft.com
- GCC High: https://security.microsoft.us
- DoD: https://security.apps.mil
If you're a GCC customer and are moving from Microsoft Defender for Endpoint commercial to GCC, use https://transition.security.microsoft.com to access your Microsoft Defender for Endpoint commercial data.
API access
When you use a US government cloud, use the following URIs instead of the public URIs listed in the API documentation:
Login:
- GCC:
https://login.microsoftonline.com - GCC High and DoD:
https://login.microsoftonline.us
- GCC:
Microsoft Defender XDR API:
- GCC:
https://api-gcc.security.microsoft.us - GCC High and DoD:
https://api-gov.security.microsoft.us
- GCC: