Microsoft Defender × Tines

Integrating Tines’ powerful automation capabilities with Microsoft Defender’s advanced threat protection enables seamless, real-time threat detection and response, significantly enhancing your organization’s security posture.

Book a demoSign up free

Pre-built templates

With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.

Update Existing IP Range in Cloud App Security
Send Activity Feedback in Cloud App Security
Mark Alert as Unread in Cloud App Security
Mark Alert as Read in Cloud App Security
List Existing IP Ranges Filtered by Category in Cloud App Security
List All Activities in Cloud App Security
List Activities with Filters in Cloud App Security
Isolate device with Microsoft DFE
Get Open Alerts in Cloud App Security
Get machines from Microsoft DFE
Get machine from Microsoft DFE
Get installed software using Microsoft DFE
Fetch Alert by ID in Cloud App Security
Fetch Activity by ID in Cloud App Security
Delete IP Range Using ID in Cloud App Security
Create New IP Range in Cloud App Security
Collect file from a device with Microsoft DFE
Close Alert as True Positive in Cloud App Security
Close Alert as False Positive in Cloud App Security

Build your own connections

With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.

cURL request

curl -v -X GET --location "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" -H 'Content-Type: application/json'

Paste in your Tines story

Full workflow examples

Explore pre-built workflows for Microsoft Defender. Use them for inspiration or as a starting point to build your custom automation solution.

Retrieve alerts from Microsoft Defender for Cloud and create detailed issue in Jira

Tools: Jira Software, Microsoft Azure, Microsoft Defender

Investigate and remediate malware with CrowdStrike FalconX and Microsoft Defender

Tools: CrowdStrike, Jira Software, Microsoft Defender, Slack

Execute a script on an endpoint with Microsoft Defender Live Response

Tools: Microsoft Defender

Retrieve new alerts from Microsoft Defender and create issues in Jira

Tools: Jira Software, Microsoft Azure, Microsoft Defender

Fetch & manage Microsoft Defender alerts

Tools: Jira Software, Microsoft

Isolate machines in Microsoft Defender

Tools: Microsoft Defender

Connect quickly

It takes minutes, not months, to connect to tools in Tines.

Credentials documentation

Learn how to use credentials in Tines.

Authentication Guides

Learn how to authenticate third-party products for use with Tines.

More Microsoft products

View all Microsoft products →

Microsoft TeamsMicrosoft GraphMicrosoft OneDriveMicrosoft OutlookMicrosoft SentinelPower BIAzure AI Bot ServiceAzure DevOpsAzure Cosmos DBAzure MonitorAzure Blob Storage

Explore more resources

Check out our blogs, browse our learning paths, and more.

Tines blog

Stay in the know

Update from Tines; the smart, secure workflow builder for your whole team.

Go to blog

Case studies

Powerful users, powerful studies

Discover how companies – from Fortune 10 to startups – apply Tines to transform the way their teams operate.

Read case studies

Learn

Tines University

Build your knowledge with dedicated learning paths at all levels.

Start learning

Learn

Learn to use Tines with our documentation

Go to docs

Trusted by industry innovators

CanvaCode42CoinbaseElasticGitLabIntercom
MarsMcKessonOak Ridge National LaboratoryOpenTableSnowflakeReddit

Built by you,
powered by Tines

Book a demoSign up free

Already have an account? Log in.