MDTI for Government Now Available

We are excited to introduce Microsoft Defender Threat Intelligence (MDTI) with FedRAMP High. (Ministry of Defense IL2) Proof is now available in the government sector as well. Customers in U.S. state, local, and tribal governments leveraging GCC services can now purchase MDTI and MDTI API SKUs to help unmask attackers and understand their organization’s security posture against threats.

MDTI serves as the ultimate resource for Microsoft threat intelligence, enabling security teams to access, collect, and take action on a comprehensive repository of operational, strategic, and tactical threat intelligence. MDTI allows organizations to quickly assess their exposure to threats, including the more than 300 threat actors that Microsoft monitors, and determine the best course of action. MDTI, licensed per seat, grants access to the premium ‘Analysis Workbench’ located in the Threat Intelligence tab of the Defender XDR portal. This workbench provides extensive, mature threat intelligence on attackers, tools, and techniques, complemented by advanced Internet datasets that help analysts dig deeper and identify threat infrastructures.

To access the API, customers must purchase an MDTI seat license. APIs facilitate integration with other security tools by providing valuable context about threat actors, vulnerabilities, and attack tools. When combined with Microsoft Sentinel, the API provides powerful context and improves alert enrichment and classification capabilities.

MDTI is the definitive source of Microsoft Threat Intelligence available to customers.

Learn more about MDTI by taking the MDTI Ninja Training here.

conclusion

Microsoft is a leading threat leader built on visibility across the global threat landscape, enabling you to secure Azure and other large-scale cloud environments, manage billions of endpoints and email, and maintain a continuously updated Internet graph. Provides intelligence. By processing a staggering 78 trillion security signals every day, Microsoft delivers threat intelligence from MDTI that provides a comprehensive view of attack vectors across a variety of platforms, ensuring Sentinel customers receive comprehensive threat detection and remediation.

If you are interested in learning more about MDTI, how it can help uncover and neutralize modern attackers and cyber threats like ransomware, and exploring its capabilities and benefits. Visit the MDTI product webpage..