🔥 3-day streak
Microsoft 365 Administrator65 / 119
Question 65 of 119

Your organization uses Microsoft Defender XDR. A security analyst reads about a newly disclosed threat actor in the news and wants to determine whether the actor's known indicators of compromise (IOCs), tools, and techniques have been observed in your environment, along with reading a curated analyst write-up that maps the actor's behavior to MITRE ATT&CK. Which Defender XDR capability should the analyst use to obtain this curated intelligence and pivot directly into hunting for the associated IOCs?

Reviewed for accuracy · Report an issueNext question