Microsoft Defender ATP¶

Microsoft Defender ATP enables you to fetch and analyze Microsoft Defender ATP logs.

Microsoft Defender ATP consists of the following components:

1. Fetcher

   • MicrosoftDefenderATPFetcher

2. Compiled Normalizer

   • MicrosoftDefenderATPCompiledNormalizer

3. Dashboard Package

   • LP_MicrosoftDefenderATP

4. Alert Packages

   • LP_MicrosoftDefenderATP Defense Evasion Detected

   • LP_MicrosoftDefenderATP Malware Detected

   • LP_MicrosoftDefenderATP Potentially Unwanted Software Detected

   • LP_MicrosoftDefenderATP Quarantine Attempted

   • LP_MicrosoftDefenderATP Remediation Unsuccessful