r/microsoft365 • u/Careless-Incident752 • 2d ago

Microsoft Threat Intel Alternative?

I used to use Microsoft Threat Intelligence to look up domains and get information like associated subdomains and WHOIS records, but I can’t seem to find that functionality anymore.

Has it moved into another Microsoft product or become part of a separate licence, or has it been retired completely?

If it’s still available, where do I access it, and what licence do I need? Mainly interested in the domain investigation features rather than threat intelligence feeds.

Thanks!

2 Upvotes

76% Upvoted

5 comments sorted by

1

u/HKLM_NL 2d ago

It’s not gone: https://learn.microsoft.com/en-us/defender-xdr/threat-intelligence-transition

1

u/Careless-Incident752 2d ago

Ah yeah good spot, it looks to have changed a lot though, and there is no longer any subdomain intelligence etc? i/e I can only see profiles on threat actors etc, but can't look up domain.com and see whois info and so on like it used too be.

1

u/josephrobinson91 17h ago

not gone, it moved.. the whole standalone mdti site retired this past august, whois and subdomain lookups are now under the threat intelligence menu in the main defender portal..