diff --git a/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md b/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md index 03aa0dbd08..0686e10a8a 100644 --- a/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md @@ -80,6 +80,8 @@ An ID is created for that alert definition. You would then create an Indicator O POST https://TI.SecurityCenter.Windows.com/v1.0/AlertDefinition HTTP/1.1 Authorization: Bearer Content-Type: application/json; + + { "Name": " The name of the IOA. Does not appear in the portal. Max length: 100 ", "Severity": "Low",