Monitoring Microsoft Defender reports

Monitoring reports in Microsoft Defender is important for maintaining and improving your organization’s security posture. These reports provide insights into various aspects of security, including threat detection, device health, and web protection.

Important note

There are numerous components to Microsoft Defender. In this recipe, we’ll highlight several reports and dashboards you may find of interest. You’re encouraged, however, to further explore the left navigation menu of Microsoft Defender to find all that’s available to you in your specific subscription.

Getting ready

Ensure you have the Global Administrator or Security Administrator role to complete the steps in this recipe.

How to do it…

1. Navigate to the Microsoft Defender portal at https://security.microsoft.com.
2. Monitor Threat analytics:
   1. Go to Threat intelligence | Threat analytics
   2. This report, like the one shown in Figure 12...