capability

Explorer and Real-time Detections

Explorer and Real-time Detections help investigate email and collaboration threats, message delivery, URLs, files, malware, phishing, and post-delivery actions.

capabilitiesCurrent

Relationships

Microsoft Defender for Office 365
Source productproductMicrosoft Defender for Office 365 Plan 1
Required licenselicenseEmailEvents
Related tabletableEmailUrlInfo
Related tabletableEmailAttachmentInfo
Related tabletableEmailPostDeliveryEvents
Related tabletableUrlClickEvents
Related tabletableCampaignInfo
Related tabletableMessageEvents
Related tabletableMessageUrlInfo
Related tabletableMessagePostDeliveryEvents
Related tabletableMicrosoft Graph Security API
API accessapi

Configuration Methods

MethodSupportReference or Gap
PortalSupported Reference
PowerShellSupported Reference
REST APIGapExplorer is primarily a portal investigation experience; use Graph Security and hunting APIs for programmatic investigation.
GraphSupported Reference
ARMGapNo ARM resource is recorded for this capability.
BicepGapNo Bicep resource is recorded for this capability.
TerraformGapExplorer is an investigation surface, not Terraform-managed configuration.
GitHub ActionsSupported Reference
Azure DevOpsSupported Reference