About Microsoft Graph API data ingest for Defender for Office 365 and Azure Active Directory

Detect elusive threats with unified identity and email security data in Falcon Insight XDR. With CrowdStrike Falcon®  Insight XDR, you can easily ingest Microsoft Defender for Office 365 email alerts and Azure Active Directory Identity telemetry into the CrowdStrike®  Falcon platform to gain comprehensive cross-domain visibility of threats throughout your attack surface. See Microsoft Defender for Office 365 email alerts and Azure AD identity events via Microsoft’s Graph API within the Falcon console alongside additional threat indicators from other domains to minimize context switching across multiple interfaces, speeding up detection and triage, while improving accuracy.

1. 01

   Enable faster cross-domain threat detection with Microsoft alerts

   Get extended visibility across email and endpoint threat vectors with Microsoft Defender for Office 365 email and Azure AD identity alert-based threat indicators within Falcon Insight XDR.

2. 02

   Get ahead of email and identity threats

   Leverage Microsoft Defender for Office 365 and Azure AD’s visibility and intelligence of email and identity threats with your existing CrowdStrike security data to gain multi-layered threat protection.

3. 03

   Unify threat visibility in a single console

   Cut investigation and triage time down by minimizing context switching and accelerating threat detection through CrowdStrike’s unified, threat-centric command console.