2.5 KiB
title, description, keywords, search.product, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic
title | description | keywords | search.product | search.appverid | ms.prod | ms.mktglfcycl | ms.sitesec | ms.pagetype | ms.author | author | ms.localizationpriority | manager | audience | ms.collection | ms.topic |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Troubleshoot custom threat intelligence issues in Microsoft Defender ATP | Troubleshoot issues that might arise when using the custom threat intelligence feature in Microsoft Defender ATP. | troubleshoot, custom threat intelligence, custom ti, rest api, api, alert definitions, indicators of compromise | eADQiWindows 10XVcnh | met150 | w10 | deploy | library | security | macapara | mjcaparas | medium | dansimp | ITPro | M365-security-compliance | troubleshooting |
Troubleshoot custom threat intelligence issues (Deprecated)
Applies to:
You might need to troubleshoot issues while using the custom threat intelligence feature.
This page provides detailed steps to troubleshoot issues you might encounter while using the feature.
Learn how to get a new client secret
If your client secret expires or if you've misplaced the copy provided when you were enabling the custom threat intelligence application, you'll need to get a new secret.
-
Login to the Azure management portal.
-
Select Active Directory.
-
Select your tenant.
-
Click App registrations > All apps. Then select the relevant application name:
- WindowsDefenderATPThreatIntelAPI (formerly known as WindowsDefenderATPCustomerTiConnector)
- WindowsDefenderATPSiemConnector
-
Under Settings, select Keys, then provide a key description and specify the key validity duration.
-
Click Save. The key value is displayed.
-
Copy the value and save it in a safe place.
Want to experience Microsoft Defender ATP? Sign up for a free trial.
Related topics
- Understand threat intelligence concepts
- Enable the custom threat intelligence API in Microsoft Defender ATP
- Create custom alerts using the threat intelligence API
- PowerShell code examples for the custom threat intelligence API
- Python code examples for the custom threat intelligence API
- Experiment with custom threat intelligence alerts