Microsoft Security | Microsoft Defender | Other
Additional Microsoft Defender tools and services that provide security across various platforms and environments
To use a part of MDTI data to analyze our customers log in our SIEM is acceptable in Microsoft terms?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 22%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
nuta
0
Reputation points
We would like to extract MDTI indicators (malicious IPs/domains) through Microsoft Graph API, store them in our SIEM not on Azure, and correlate them with customer logs for threat detection. We will not redistribute or resell the MDTI indicator feed itself. Is this usage permitted under the MDTI license terms?
Microsoft Security | Microsoft Defender | Other
Sign in to answer