Windows 10: Perform bulk isolation for endpoints managed by Windows Defender for Endpoint

Hi Everyone, I have been recently studying the implementation of Defender for Endpoint API to perform bulk isolation/release for endpoints. This documentation https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/isolate-machine?view=o365-worldwide states a limitation of 100 calls/minute and 1500 calls/hour. So I have to think of another way to overcome this. API structure uses endpoint ID as follows: POST https://api.securitycenter.microsoft.com/api/machines/{id}/isolateOne of the things I thought of is that if I can run this API and fill in a 'Device Group' ID instead o

:)

 

SIEM Integration With Microsoft Endpoint Configuration Manager

Hi,



Thank you for writing to Microsoft Community Forums.



We understand the concern as you want to know whether
it’s possible to forward antivirus logs in Microsoft Endpoint Configuration Manager to a SIEM.



In this case we would suggest you to refer these articles:

Configure
Endpoint Protection

Microsoft Endpoint Configuration Manager documentation



However, for concern/queries related to Microsoft Endpoint Configuration, let me help to point you in the right direction. I would suggest you to post your query in
TechNet Forums where you will find professionals
with expertise on Microsoft Endpoint Configuration
and that would be the appropriate forum



Regards,



Aditya Roy

Microsoft Community – Moderator

 

Symantec Endpoint?

I had Windows 7 and used Symantec Endpoint and worked great, now that I upgraded to Windows 10, I am being told that the Endpoint does not work with Windows 10, and that I Microsoft Defender is turned off and it will not let me turn it on. If I delete
teh files for Endpoint, will it allow Defender to come on? What if I just add teh new edition of Symantec Endpoint that says it works on Windows 10? I feel much safer using teh Endpoint then any other virus protection. Have been on computers since 1974 and
used many different ones and had troubles with all of them until about 2000 when i started with Endpoint and have not had a single virus, hack, or anything get thru.

 

Microsoft Defender for Endpoint on iOS is now generally available

Source: https://techcommunity.microsoft.com/...e/ba-p/1962420


Download: Microsoft Defender ATP on the App Store