Microsoft Defender XDR: Building Detection Beyond the Defaults

M365.FM | Microsoft 365, Azure Cloud, Power Platform & AI · Nov 4, 2026 · 1:18:22

Listen in the Podli app 🎧

Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.

Default detections are a starting point. Good detection engineering adds your context on top. In this episode of M365 FM, we discuss how to build detection beyond the defaults in Microsoft Defender XDR: custom detections, advanced hunting, tuning and response automation.
You will learn how to move from alert handling to a repeatable detection practice.
Who it is for: SOC analysts, security engineers and Defender administrators.

Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-microsoft-365-azure-cloud-power-platform-ai--6704921/support.

This episode includes AI-generated content.