Microsoft Defender × Tines

Integrating Tines’ powerful automation capabilities with Microsoft Defender’s advanced threat protection enables seamless, real-time threat detection and response, significantly enhancing your organization’s security posture.

Book a demoSign up free

Pre-built templates

With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.

Update Existing IP Range in Cloud App Security
Send Activity Feedback in Cloud App Security
Mark Alert as Unread in Cloud App Security
Mark Alert as Read in Cloud App Security
List Existing IP Ranges Filtered by Category in Cloud App Security
List All Activities in Cloud App Security
List Activities with Filters in Cloud App Security
Get Open Alerts in Cloud App Security
Fetch Alert by ID in Cloud App Security
Fetch Activity by ID in Cloud App Security
Delete IP Range Using ID in Cloud App Security
Create New IP Range in Cloud App Security
Close Alert as True Positive in Cloud App Security
Close Alert as False Positive in Cloud App Security

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v -X GET --location "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" -H 'Content-Type: application/json'

Paste in your Tines story

Full workflow examples

Explore pre-built workflows for Microsoft Defender. Use them for inspiration or as a starting point to build your custom automation solution.

Investigate and remediate malware with CrowdStrike FalconX and Microsoft Defender

Tools: CrowdStrike, Jira Software, Microsoft Defender, Slack

Advanced Live Response tool for Microsoft Defender powered by Tines pages

Tools: Microsoft Defender

By Horia Todoran

Retrieve alerts from Microsoft Defender for Cloud and create detailed issue in Jira

Tools: Jira Software, Microsoft Azure, Microsoft Defender

Isolate machines in Microsoft Defender

Tools: Microsoft Defender

Execute a script on an endpoint with Microsoft Defender Live Response

Tools: Microsoft Defender

Retrieve new alerts from Microsoft Defender and create issues in Jira

Tools: Jira Software, Microsoft Azure, Microsoft Defender

Connect quickly

It takes minutes, not months, to connect to tools in Tines.

Credentials documentation

Learn how to use credentials in Tines.

Authentication Guides

Learn how to authenticate third-party products for use with Tines.

More Microsoft Azure products

Azure AI Bot ServiceAzure DevOpsAzure Cosmos DBAzure MonitorAzure Blob StorageMicrosoft Sentinel

Explore more resources

Check out our blogs, browse our learning paths, and more.

Tines blog

Stay in the know

Update from Tines; the smart, secure workflow builder for your whole team.

Go to blog

Case studies

Powerful users, powerful studies

Discover how companies – from Fortune 10 to startups – apply Tines to transform the way their teams operate.

Read case studies

Learn

Tines University

Build your knowledge with dedicated learning paths at all levels.

Start learning

Learn

Learn to use Tines with our documentation

Go to docs

Trusted by industry innovators

CanvaCode42CoinbaseDropboxElasticNotion
MarsMcKessonOpenTableSnowflakeReddit

Built by you,
powered by Tines

Book a demoSign up free

Already have an account? Log in.