Microsoft Defender for Endpoint × Tines

Integrating Tines and Microsoft Defender for Endpoint streamlines and automates threat detection and response, enhancing security operations efficiency and reducing incident response time.

Microsoft Defender for Endpoint

Pre-built templates

With Tines, you can easily take any action that has a defined API. We’ve already pre-built some of the most popular ones for you, so you can build quickly.

Add scan definition
Batch delete indicators
Batch update alerts
Cancel machine action
Collect investigation package
Create alert
Delete from library
Delete indicator
Delete scan definition
Export browser extensions assessment
Export certificate inventory assessment
Export device antivirus health report
Export device health assessment
Export information gathering assessment
Export non-product code software inventory assessment (JSON)
Export secure configuration assessment (JSON)
Export security baselines assessment (JSON response)
Export security baselines assessment (via files)
Export software inventory assessment (files)
Export software inventory assessment (JSON)

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v \ -X GET \ --location \ "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" \ -H 'Content-Type: application/json'

Paste in your Tines story

HTTP requestRequest toapi.nasa.gov

Connect quickly

It takes minutes, not months, to connect to tools in Tines.

Explore more resources

Check out our blogs, browse our learning paths, and more.

Built by you,
powered by Tines

Already have an account? Log in.