You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[Microsoft Defender Experts for XDR](dex-xdr-overview.md)
32
32
33
-
Microsoft Defender Experts for Hunting is a managed service that provides hunting capabilities for novel emerging threats that are not yet well-known in the industry. The analysts for the hunting service review trends in the threat attacker evolution based on world-renowned Microsoft Threat Intelligence and Research and apply the insights to hunt for emerging attack vectors within the customer ecosystem.
33
+
[Microsoft Defender Experts for Hunting](defender-experts-for-hunting.md) is a managed service that provides hunting capabilities for novel emerging threats that aren't yet well-known in the industry. The analysts for the hunting service review trends in the threat actor evolution based on world-renowned Microsoft Threat Intelligence and Research. They then apply the insights they gather to hunt for emerging attack vectors within the customer ecosystem.
34
34
35
-
This document outlines the key infrastructure requirements you must meet and important information on data access and compliance you must know before purchasing the Microsoft Defender Experts for Hunting service. Microsoft understands that customers who use our managed services entrust us with their most valued asset, their data.
36
-
37
-
With deep product expertise powered by threat intelligence, we are uniquely positioned to help you:
35
+
With deep product expertise powered by threat intelligence, we're uniquely positioned to help you:
38
36
39
37
1. Focus on novel threat actor evolution in the context of your ecosystem.
40
-
1. Our experts provide detailed, step-by-step, actionable guidance to respond to these emerging threats.
41
-
1. Seek assistance from Defender Experts.
42
-
43
-
## Eligibility and licensing
38
+
1. Get detailed, step-by-step, and actionable guidance from our experts so you can respond to these emerging threats.
39
+
1.[Seek assistance](#ask-defender-experts) from Defender Experts.
44
40
45
41
This document outlines the key infrastructure requirements you must meet and important information on data access and compliance you must know before purchasing the Microsoft Defender Experts for Hunting service. Microsoft understands that customers who use our managed services entrust us with their most valued asset, their data.
46
42
47
-
### Check if your environment meets licensing and access prerequisites
43
+
##Eligibility and licensing
48
44
49
-
Microsoft Defender Experts for Hunting is a separate service from your existing Defender products. Before enrolling in this service, make sure that you have the necessary license and access.
45
+
Defender Experts for Hunting is a separate service from your existing Microsoft Defender products. Before enrolling in this service, make sure that you have the necessary license and access.
50
46
51
-
To enable us to get started with this threat hunting service, we require the following licensing prerequisites:
47
+
We require the following licensing prerequisites to enable us to get started with this threat hunting service:
52
48
53
49
- Microsoft Defender for Endpoint P2 must be licensed and enabled on eligible devices
54
50
- Microsoft Defender Antivirus must be licensed and enabled in active mode on devices onboarded to Defender for Endpoint (required for endpoint detection)
@@ -62,32 +58,31 @@ The following products are also eligible to get Defender Experts for Hunting cov
62
58
The following product is **not** covered by this service:
63
59
64
60
- Microsoft Defender for IoT
61
+
- Other Microsoft services not mentioned in the previous lists
65
62
66
63
### Defender Experts for Hunting coverage
67
64
68
-
This service relies on event signals from Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps and Microsoft Defender for Identity, along with proprietary Microsoft Threat Intelligence sources.
69
-
Defender Experts for Hunting also covers servers—whether on premises or on a hyperscale cloud service provider—that have Defender for Endpoint deployed on them with a Microsoft Defender for Endpoint for Servers license.
70
-
Any detection that is not written by Microsoft Defender Products that is, third-party authored detection, is not within the scope of Defender Experts for Hunting.
65
+
Defender Experts for Hunting relies on event signals from Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity. It also relies on proprietary Microsoft Threat Intelligence sources.
71
66
72
-
### Server coverage
67
+
This service also covers servers—whether on premises or on a hyperscale cloud service provider—that have Defender for Endpoint deployed on them with a Microsoft Defender for Endpoint for Servers license.
73
68
74
-
Defender Experts for Hunting also covers servers—whether on premises or on a hyperscale cloud service provider—that have Microsoft Defender for Endpoint deployed on them with a Microsoft Defender for Endpoint for Servers license. For Defender Experts coverage, a server is considered as a user account for billing. The service doesn't cover Microsoft Defender for Cloud.
75
-
[Learn more about specific hardware and software requirements](/defender-endpoint/minimum-requirements)
69
+
Any detection that's not from Microsoft Defender products (for example, detections from other security vendors) isn't within the scope of Defender Experts for Hunting.
76
70
77
71
### Ask Defender Experts
78
72
79
-
Ask Defender Experts is intended to provide a better understanding of complex threats affecting your organization - focused on products included in Microsoft Defender XDR that is Microsoft Defender for Endpoint, Microsoft Defender for Office, Microsoft Defender for Cloud Apps, and Microsoft Defender for Identify.
80
-
[See sample questions you can ask Defender Experts](experts-on-demand.md#sample-questions-you-can-ask-from-defender-experts).
73
+
[Ask Defender Experts](experts-on-demand.md) is intended to provide a better understanding of complex threats affecting your organization. It focuses on products included in Microsoft Defender XDR (Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, and Defender for Identity). [See sample questions you can ask Defender Experts](experts-on-demand.md#sample-questions-you-can-ask-from-defender-experts).
81
74
82
-
Defender Experts for Hunting customers are assigned 10 **Ask Defender Experts** credits, which you can use to submit questions, at the start of each calendar quarter. Unused credits from the current quarter roll up to the next one. You can use up to 20 credits only per quarter. All unused credits expire by the end of the calendar year or at the end of your subscription term, whichever comes first.
75
+
Defender Experts for Hunting customers are assigned 10 Ask Defender Experts credits, which you can use to submit questions, at the start of each calendar quarter. Unused credits from the current quarter roll up to the next one. You can use up to 20 credits only per quarter. All unused credits expire by the end of the calendar year or at the end of your subscription term, whichever comes first.
83
76
84
77
[Learn more about Microsoft's commercial licensing terms](https://www.microsoft.com/licensing/terms/productoffering/Microsoft365/MCA)
85
78
86
-
###Access requirements
79
+
## Access requirements
87
80
88
-
Anyone from your organization can complete the customer interest form for Microsoft Defender Experts for Hunting service, however, you need to work with your Commercial Executive to transact the SKU. You might need certain roles and permissions to fully access the service capabilities. Refer to [Custom roles in role-based access control for Microsoft Defender XDR](custom-roles.md) for details.
81
+
Anyone from your organization can [apply for the Defender Experts for Hunting service](#apply-for-microsoft-defender-experts-for-hunting-service). However, you need to work with your Commercial Executive to transact the SKU.
89
82
90
-
## Understand the service's availability and data access requirements
83
+
You might need certain roles and permissions to fully access the service capabilities. Refer to [Custom roles in role-based access control for Microsoft Defender XDR](custom-roles.md) for details.
84
+
85
+
## Service availability and data protection
91
86
92
87
Defender Experts for Hunting is a managed threat hunting service that proactively hunts for threats across endpoints, email, identity, and cloud apps. To carry out hunting on your behalf, Microsoft experts need access to your Microsoft Defender XDR advanced hunting data. Enrolling in this service means you're granting permission to Microsoft experts to access the said data.
93
88
@@ -113,7 +108,16 @@ This service is available worldwide for customers in our commercial public cloud
113
108
114
109
This service is currently delivered in English language only.
115
110
111
+
## Apply for Microsoft Defender Experts for Hunting service
112
+
113
+
You can apply for the Defender Experts for Hunting by performing the following steps:
114
+
115
+
1. Complete the [customer interest form](https://aka.ms/DEX4HuntingCustomerInterestForm).
116
+
2. Enter your name, company name, and company email ID.
117
+
3. Select **Submit**. Someone from our sales team will reach out within five business days.
118
+
116
119
### Next step
117
120
118
121
-[Start using Defender Experts for Hunting](onboarding-defender-experts-for-hunting.md)
0 commit comments