Skip to content

Commit 64f8e6e

Browse files
committed
added widget and digest features
1 parent a35d31a commit 64f8e6e

6 files changed

+34
-5
lines changed

defender/threat-intelligence/TOC.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,9 @@
3131
href: using-projects.md
3232
- name: Using Microsoft Copilot in Defender for threat intelligence
3333
href: using-copilot-threat-intelligence-defender-xdr.md
34+
- name: Enabling data connector for Defender TI in Microsoft Sentinel (Preview)
35+
href: /azure/sentinel/connect-mdti-data-connector
36+
3437
- name: Tutorials
3538
items:
3639
- name: Gathering threat intelligence and infrastructure chaining

defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md

Lines changed: 24 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: 'Quickstart: Accessing Microsoft Defender Threat Intelligence (Defender TI)'
3-
description: In this quickstart, learn how to access Microsoft Defender Threat Intelligence (Defender TI) in the Microsoft Defender portal, as well as configure your profile and preferences and access help resources in the Defender portal.
3+
description: Learn how to access Microsoft Defender Threat Intelligence (Defender TI) in the Microsoft Defender portal, configure your profile and preferences, and access help resources.
44
author: alexroland24
55
ms.author: aroland
66
manager: dolmont
@@ -14,11 +14,11 @@ ms.collection: essentials-get-started
1414
# Quickstart: Learn how to access Microsoft Defender Threat Intelligence and make customizations
1515

1616
>[!IMPORTANT]
17-
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) will be retired and will no longer be accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Copilot for Security](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
17+
> As of June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) has been retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Copilot for Security](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
1818
1919
This guide walks you through how to access Microsoft Threat Intelligence (Defender TI) from the Microsoft Defender portal, adjust the portal's theme to make it easier on your eyes when using it, and find sources for enrichment so you can see more results when gathering threat intelligence.
2020

21-
:::image type="content" source="/defender/threat-intelligence/media/quickstart-intel-explorer.png" alt-text="Screenshot of the Microsoft Defender Threat Intelligence Intel explorer in the Microsoft Defender portal." lightbox="/defender/threat-intelligence/media/quickstart-intel-explorer.png":::
21+
:::image type="content" source="/defender/threat-intelligence/media/quickstart-intel-explorer.png" alt-text="Screenshot of the Microsoft Defender Threat Intelligence Intel explorer in the Microsoft Defender portal." lightbox="/defender/threat-intelligence/media/quickstart-intel-explorer.png":::
2222

2323
## Prerequisites
2424

@@ -37,6 +37,7 @@ This guide walks you through how to access Microsoft Threat Intelligence (Defend
3737
- Intel projects
3838

3939
:::image type="content" source="/defender/threat-intelligence/media/quickstart-navigation.png" alt-text="Screenshot of the Microsoft Defender portal with the Threat intelligence navigation links highlighted." lightbox="/defender/threat-intelligence/media/quickstart-navigation.png":::
40+
4041
## Adjust the Defender portal's display theme to dark or light mode
4142

4243
By default, the Defender portal's display theme is set to light mode. To switch to dark mode, on the Defender portal, navigate to **Home** then select **Dark mode** on the upper right-right corner of the home page.
@@ -47,6 +48,26 @@ To switch back to light mode, select **Light mode** in the same upper-right hand
4748

4849
![Partial screenshot of the Defender portal home page with the Light mode icon hightlighted.](media/quickstart-light-mode.png)
4950

51+
## Catch up on the latest threat intelligence
52+
53+
You can keep yourself updated with the latest and most notable threat intelligence articles through the **Featured threat intelligence article** widget or through the article digest notifications.
54+
55+
### Featured threat intelligence articles widget
56+
57+
The **Featured threat intelligence articles** widget in the Defender portal home page displays the recent Defender TI publications that are tagged as [Featured articles](what-is-microsoft-defender-threat-intelligence-defender-ti.md#featured-articles):
58+
59+
:::image type="content" source="/defender/threat-intelligence/media/mdti-featured-articles-widget.png" alt-text="Screenshot of Featured threat intelligence articles widget in the Defender portal home page." lightbox="/defender/threat-intelligence/media/mdti-featured-articles-widget.png":::
60+
61+
### Article digest
62+
63+
In the **Intel explorer** page, a banner message notifies you of the number of new Defender TI articles that were published since you last accessed the Defender portal. Select **Show me** to open a flyout panel that lists the articles you might have missed, then select any of the listed articles to open it:
64+
65+
:::image type="content" source="/defender/threat-intelligence/media/mdti-article-digest-01.png" alt-text="Screenshot of the Intel explorer article digest banner message notification and flyout panel." lightbox="/defender/threat-intelligence/media/mdti-article-digest-01.png":::
66+
67+
Select the **Clear** button in the flyout panel or close the banner message to clear the article digest:
68+
69+
70+
:::image type="content" source="/defender/threat-intelligence/media/mdti-article-digest-02.png" alt-text="Screenshot of the Intel explorer article digest flyout panel with the Clear button highlighted." lightbox="/defender/threat-intelligence/media/mdti-article-digest-02.png":::
5071

5172
## Get help and learn about Defender TI support resources
5273

716 KB
Loading
714 KB
Loading
441 KB
Loading

defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: 'What is Microsoft Defender Threat Intelligence (Defender TI)?'
3-
description: 'In this overview article, learn about the main features that come with Microsoft Defender Threat Intelligence (Defender TI).'
3+
description: 'Learn about the main features that come with Microsoft Defender Threat Intelligence (Defender TI).'
44
author: alexroland24
55
ms.author: aroland
66
manager: dolmont
@@ -14,7 +14,7 @@ ms.custom: template-overview
1414
# What is Microsoft Defender Threat Intelligence (Defender TI)?
1515

1616
>[!IMPORTANT]
17-
> On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) will be retired and will no longer be accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Copilot for Security](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
17+
> As of June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) has been retired and is no longer accessible. Customers can continue using Defender TI in the [Microsoft Defender portal](https://aka.ms/mdti-intel-explorer) or with [Microsoft Copilot for Security](security-copilot-and-defender-threat-intelligence.md). [Learn more](https://aka.ms/mdti-standaloneportal)
1818
1919
Microsoft Defender Threat Intelligence (Defender TI) is a platform that streamlines triage, incident response, threat hunting, vulnerability management, and threat intelligence analyst workflows when conducting threat infrastructure analysis and gathering threat intelligence. With security organizations actioning an ever-increasing amount of intelligence and alerts within their environment, having a threat analysis an intelligence platform that allows for accurate and timely assessments of alerting is important.
2020

@@ -39,10 +39,15 @@ The **Featured articles** section of the Intel explorer page (right below the se
3939

4040
![TI Overview Featured Articles](media/tiOverviewFeaturedArticles.png)
4141

42+
Featured articles also appear in the [**Featured threat intelligence articles** widget](learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md#featured-threat-intelligence-articles-widget) in the Defender portal home page:
43+
44+
:::image type="content" source="/defender/threat-intelligence/media/mdti-featured-articles-widget.png" alt-text="Screenshot of Featured threat intelligence articles widget in the Defender portal home page." lightbox="/defender/threat-intelligence/media/mdti-featured-articles-widget.png":::
45+
4246
Selecting a featured article banner loads it full article content. The article's **Snapshot** gives you a quick understanding of the article. The **Indicators** call-out shows how many public and Defender TI indicators are associated with the article.
4347

4448
![TI Overview Featured Article](media/tiOverviewFeaturedArticle.png)
4549

50+
4651
### Articles
4752

4853
All articles (including the featured articles) are listed in the **Recent articles** section according to their publication date, with the most recent one on top.

0 commit comments

Comments
 (0)