Configure the Microsoft Defender portal
The Settings page lets you configure related Microsoft Defender products. The specific settings for the Defender products will be discussed in the related learning content. The primary setting for Microsoft Defender XDR is the notifications email configuration.
Types of Microsoft Defender portal email notifications
When you set up email notifications, you can choose from two types, as described in the following table:
| Notification type | Description |
|---|---|
| Incidents | When new Incidents are created |
| Threat Analytics | When new Threat Analytic reports are created |
Manage Incident email notifications
To view, add or edit Incident email notification settings for your organization, follow these steps:
In the navigation pane, select Settings, and then select Microsoft Defender XDR. Then, select Email notifications.
Next, select Incidents
To add a new notification:
- Select Add incident email notification.
- Enter a name and description, then next.
- Select device and alert criteria, then next.
- Enter the recipients email address, then next.
- Select the Create rule button.
Manage Threat Analytics email notifications
To view, add or edit Threat Analytics email notification settings for your organization, follow these steps:
In the navigation pane, select Settings, and then select Microsoft Defender XDR. Then, select Email notifications.
Next, select Threat Analytics
To add a new notification:
- Select Create a notification rule.
- Enter a name and description, then next.
- Select threat analytics criteria, then next.
- Enter the recipients email address, then next.
- Select the Create rule button.