2019-09-20 11:18:00 -07:00

2.5 KiB

title, description, keywords, search.product, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic
title description keywords search.product search.appverid ms.prod ms.mktglfcycl ms.sitesec ms.pagetype ms.author author ms.localizationpriority manager audience ms.collection ms.topic
Troubleshoot custom threat intelligence issues in Microsoft Defender ATP Troubleshoot issues that might arise when using the custom threat intelligence feature in Microsoft Defender ATP. troubleshoot, custom threat intelligence, custom ti, rest api, api, alert definitions, indicators of compromise eADQiWindows 10XVcnh met150 w10 deploy library security macapara mjcaparas medium dansimp ITPro M365-security-compliance troubleshooting

Troubleshoot custom threat intelligence issues (Deprecated)

Applies to:

You might need to troubleshoot issues while using the custom threat intelligence feature.

This page provides detailed steps to troubleshoot issues you might encounter while using the feature.

Learn how to get a new client secret

If your client secret expires or if you've misplaced the copy provided when you were enabling the custom threat intelligence application, you'll need to get a new secret.

  1. Login to the Azure management portal.

  2. Select Active Directory.

  3. Select your tenant.

  4. Click App registrations > All apps. Then select the relevant application name:

    • WindowsDefenderATPThreatIntelAPI (formerly known as WindowsDefenderATPCustomerTiConnector)
    • WindowsDefenderATPSiemConnector
  5. Under Settings, select Keys, then provide a key description and specify the key validity duration.

  6. Click Save. The key value is displayed.

  7. Copy the value and save it in a safe place.

Want to experience Microsoft Defender ATP? Sign up for a free trial.