We are thrilled to introduce Microsoft Defender Threat Intelligence (MDTI) with FedRAMP High (DOD IL2) attestation are now available for government sectors. Customers across U.S. state, local, and tribal governments utilizing GCC services can now purchase MDTI and the MDTI API SKUs to unmask adversaries and understand their organization’s security posture against threats.

MDTI serves as the ultimate resource for Microsoft Threat Intelligence, empowering security teams to access, ingest, and act upon a comprehensive repository of operational, strategic, and tactical threat intelligence. With MDTI, organizations can swiftly assess their exposure to threats, including over 300 threat actors monitored by Microsoft, and determine the best course of action. Licensed per seat, MDTI grants access to a premium ‘analyst workbench’ in the Threat Intelligence tab of the Defender XDR portal. This workbench features extensive finished threat intelligence on actors, tools, and techniques, complemented by advanced internet data sets to help analysts delve deeper and identify threat infrastructures.

For API access, customers must purchase an MDTI seat license. The API facilitates integration with other security tools, providing critical context around threat actors, vulnerabilities, and attack tools. When combined with Microsoft Sentinel, the API provides powerful context and enhances alert enrichment and triage capabilities.

MDTI is the definitive source for Microsoft Threat Intelligence made available to customers

Learn more about MDTI by taking the MDTI Ninja Training here.  

Conclusion 

Microsoft delivers leading threat intelligence built on visibility across the global threat landscape made possible protecting Azure and other large cloud environments, managing billions of endpoints and emails, and maintaining a continuously updated graph of the internet. By processing an astonishing 78 trillion security signals daily, Microsoft can deliver threat intelligence in MDTI providing an all-encompassing view of attack vectors across various platforms, ensuring Sentinel customers have comprehensive threat detection and remediation.  

If you are interested in learning more about MDTI and how it can help you unmask and neutralize modern adversaries and cyberthreats such as ransomware, and to explore the features and benefits of MDTI please visit the MDTI product web page.

​Microsoft Tech Community – Latest Blogs –Read More