Microsoft Defender Threat Intelligence Education

Dynamic threat intelligence solution

Get continuous threat intelligence

Scan the internet to create a complete picture of day-to-day changes. Create threat intelligence for your own business to understand and reduce exposure.

Expose adversaries and their methods

Understand the group behind an online attack, their methods, and how they typically operate.

Enhance alert investigations

Combine Microsoft Sentinel and Microsoft 365 Defender incident data with external threat intelligence to uncover the full scale of a threat or attack.

Accelerate incident response

Investigate and remove a single malicious IP or domain and all the known entities and resources operated by an attacker or threat family.

Hunt threats as a team

Easily collaborate on investigations across global teams using the Defender Threat Intelligence workbench. Share insights across the organization.

Expand prevention and improve security posture

Export lists of malicious entities, IPs, and domains. Block internal resources from accessing dangerous internet resources and help stop outside threats.