windows-itpro-docs/windows/security/threat-protection/microsoft-defender-atp/use-custom-ti.md

title, description, keywords, search.product, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic, ms.date

title	description	keywords	search.product	search.appverid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.author	author	ms.localizationpriority	manager	audience	ms.collection	ms.topic	ms.date
Use the custom threat intelligence API to create custom alerts	Use the threat intelligence API in Microsoft Defender Advanced Threat Protection to create custom alerts	threat intelligence, alert definitions, indicators of compromise	eADQiWindows 10XVcnh	met150	w10	deploy	library	security	macapara	mjcaparas	medium	dansimp	ITPro	M365-security-compliance	article	04/24/2018

Use the threat intelligence API to create custom alerts (Deprecated)

Applies to:

• Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)

Tip

This topic has been deprecated. See Indicators for the updated content.

Want to experience Microsoft Defender ATP? Sign up for a free trial.

Understand threat intelligence concepts, then enable the custom threat intelligence application so that you can proceed to create custom threat intelligence alerts that are specific to your organization.

You can use the code examples to guide you in creating calls to the custom threat intelligence API.

In this section

Topic	Description
Understand threat intelligence concepts	Understand the concepts around threat intelligence so that you can effectively create custom intelligence for your organization.
Enable the custom threat intelligence application	Set up the custom threat intelligence application through Microsoft Defender Security Center so that you can create custom threat intelligence (TI) using REST API.
Create custom threat intelligence alerts	Create custom threat intelligence alerts so that you can generate specific alerts that are applicable to your organization.
PowerShell code examples	Use the PowerShell code examples to guide you in using the custom threat intelligence API.
Python code examples	Use the Python code examples to guide you in using the custom threat intelligence API.
Experiment with custom threat intelligence alerts	This article demonstrates an end-to-end usage of the threat intelligence API to get you started in using the threat intelligence API.
Troubleshoot custom threat intelligence issues	Learn how to address possible issues you might encounter while using the threat intelligence API.