Vulnerability assessment tools
      Back to home
      1. Knowledge Base
      2. Streamline your process with integrations
      3. Vulnerability assessment tools

      Get information required for MS Defender for Endpoint integration

      Learn how to create the credentials needed to integrate MS Defender for Endpoint with Autobahn Fit on this page

      Table of content

      Prerequisites to enable the integration

      Prerequisites to enable the integration

      Integrating MS Defender for Endpoint data into Autobahn requires several key elements, they are:

      • Client secret

      • Application

      • Directory

      To collect all this data, you must first create an app in AzureAD for MS Defender and set the permission for the app.

      Creating an app in AzureAD for MS Defender

      1 - In AzureAD navigate to App registrations and click the New registration button.

      2 - Enter a name for your app, select Single tenant under Supported Account types, and select Web under Redirect URL. You do not need to enter a URI in the Redirect URI section. Then click the Register button.

      Grant permission to your newly created app

      1 - In the newly created app registration, navigate to the API permissions tab and click the Add a permission button.

      2 - The request API permissions dialog box will appear. Navigate to APIs my organization uses tab and type WindowsDefenderATP, then click on the result.

      3 - In the next screen select Application permissions and select the following permissions:

      • Alert.ReadAll

      • Machine.Read.All

      • SecurityRecommendation.Read.All

      • Vulnerability.Read.All 

      4 - As a final step click the Grand admin consent for button to grant access to the required permissions.

      Create the Client secrets

      1 - Navigate to the Certificates & Secrets page and open the Client Secrets tab. Click the New Client Secret.

      2 - On the Add client secret box, enter a description and decide for how long the secret should be valid. Upon expiry of the secret, you will have to create a new one and update it in Autobahn.

      Collect Client and Tenant ID

      1 - As a last step, take note of the following information, which you will need to enable the integration in Autobahn:

      • Application (client) ID

      • Directory (tenant) ID