capability

Endpoint Detection and Response

Endpoint detection and response helps detect, investigate, and respond to advanced threats on endpoints.

capabilitiesCurrent

Relationships

Microsoft Defender for Endpoint
Source productproductMicrosoft Defender for Endpoint P1
Required licenselicenseMicrosoft Defender for Endpoint P2
Required licenselicenseDeviceEvents
Related tabletableDeviceProcessEvents
Related tabletableDeviceNetworkEvents
Related tabletableDeviceFileEvents
Related tabletableMicrosoft Defender for Endpoint APIs
API accessapiMicrosoft Graph Security API
API accessapi

Configuration Methods

MethodSupportReference or Gap
PortalSupported Reference
PowerShellGapNo product-specific PowerShell automation surface is recorded for this capability yet.
REST APISupported Reference
GraphSupported Reference
ARMGapNo ARM resource is recorded for this capability.
BicepGapNo Bicep resource is recorded for this capability.
TerraformGapMDE onboarding and EDR settings are not ARM/Terraform resources. Automate onboarding packages and Intune/Graph policy outside Terraform.
GitHub ActionsSupported Reference
Azure DevOpsSupported Reference