Edit

Share via

Quickstart: Learn how to access Microsoft Defender Threat Intelligence and make customizations

  • Article

Important

On June 30, 2024, The Microsoft Defender Threat Intelligence (Defender TI) standalone portal (https://ti.defender.microsoft.com) was retired and is no longer accessible. Customers can continue using Defender TI in the Microsoft Defender portal or with Microsoft Security Copilot. Learn more

This guide walks you through how to access Microsoft Threat Intelligence (Defender TI) from the Microsoft Defender portal, adjust the portal's theme to make it easier on your eyes when using it, and find sources for enrichment so you can see more results when gathering threat intelligence.

Screenshot of the Microsoft Defender Threat Intelligence Intel explorer in the Microsoft Defender portal.

Prerequisites

  • A Microsoft Entra ID or personal Microsoft account. Sign in or create an account

  • A Defender TI premium license.

    Note

    Users without a Defender TI premium license can still access our free Defender TI offering.

Open Defender TI in the Microsoft Defender portal

  1. Access the Defender portal and complete the Microsoft authentication process. Learn more about the Defender portal

  2. Navigate to Threat intelligence. You can access Defender TI in the following pages:

    • Intel profiles
    • Intel explorer
    • Intel projects

    Screenshot of the Microsoft Defender portal with the Threat intelligence navigation links highlighted.

Adjust the Defender portal's display theme to dark or light mode

By default, the Defender portal's display theme is set to light mode. To switch to dark mode, on the Defender portal, navigate to Home then select Dark mode on the upper right-right corner of the home page.

Partial screenshot of the Defender portal home page with the Dark mode icon hightlighted.

To switch back to light mode, select Light mode in the same upper-right hand corner of the home page.

Partial screenshot of the Defender portal home page with the Light mode icon hightlighted.

Catch up on the latest threat intelligence

You can keep yourself updated with the latest and most notable threat intelligence articles through the Featured threat intelligence article widget or through the article digest notifications.

The Featured threat intelligence articles widget in the Defender portal home page displays the recent Defender TI publications that are tagged as Featured articles:

Screenshot of Featured threat intelligence articles widget in the Defender portal home page.

Article digest

In the Intel explorer page, a banner message notifies you of the number of new Defender TI articles that were published since you last accessed the Defender portal. Select Show me to open a flyout panel that lists the articles you might have missed, then select any of the listed articles to open it:

Screenshot of the Intel explorer article digest banner message notification and flyout panel.

Select the Clear button in the flyout panel or close the banner message to clear the article digest:

Screenshot of the Intel explorer article digest flyout panel with the Clear button highlighted.

Get help and learn about Defender TI support resources

Select the Help icon in the upper right-hand corner of the Defender portal. The side panel displays a search bar where you can type your problem or support question.

Screenshot of the Microsoft Defender portal with the Help side panel open and highlighted.

You can also review Microsoft's licensing resources and privacy statement by selecting Legal and Privacy & Cookies, respectively, at the lower right hand of the Help side panel.

Sign out of the Defender portal

  1. Select the My account icon in the upper right-hand corner of the Defender portal.
  2. Select Sign out.

Clean up resources

There are no resources to clean up in this section.

See also