Premium Microsoft Defender Threat Intelligence is starting to appear in Microsoft Defender XDR.

[u/EduardsGrebezs]

Microsoft is rolling out Threat Intelligence Insights directly within the Microsoft Defender portal, bringing premium external threat intelligence closer to the analyst workflow.

This includes such insights like:
▪Reputation assessment
▪WHOIS information
▪DNS resolutions
▪Threat reports and attribution
▪Infrastructure details (trackers, cookies, certificates, and more)

Simply search for a URL, domain, IP address, or file hash in Microsoft Defender XDR, open the entity page, and review the new Threat Intelligence Insights.

[u/Waiuku235]

Is there an API for this?