Microsoft Defender Threat Intelligence

Commercial Feeds Dark Web Malware Repositories Microsoft Telemetry Open Source Sandboxes Social Media

Brand Intelligence Indicators Of Compromise Malware Intelligence Tactics Techniques And Procedures Threat Actor Profiles Vulnerability Intelligence

SaaS

Cloud Providers EDR Identity providers SIEM SOAR

API CSV JSON KQL STIX 2.1 TAXII 2.1

Alerting Automated Enrichment Correlation Scoring Threat Mapping Workflows

Collaboration Dashboards Graph Visualization Query Language Reporting Watchlists

Education Enterprise Financial Services Government Healthcare Technology