Malware detected by Microsoft Defender for Endpoint

This trigger is responsible for handling the alert Malware detected by Microsoft Defender for Endpoint

Details

ID	`2c6ec9fedfbc6f85f7bfe7e68f6c36a7`
Runs Playbook	Microsoft Defender for Endpoint - Malware Detected
Suggestion Reason	Recommended for Microsoft Defender for Endpoint - Malware Detected

Alert conditions (all must match)

Field	Operator	Value
`alert_name`	CONTAINS	Malware detected by Microsoft Defender for Endpoint
`alert_source`	EQ	Correlation

Source

Trigger_-_MDE_Malware_Detected.json

Download History Raw

{
  "trigger_id": "2c6ec9fedfbc6f85f7bfe7e68f6c36a7",
  "playbook_id": "Microsoft Defender for Endpoint - Malware Detected",
  "suggestion_reason": "Recommended for Microsoft Defender for Endpoint - Malware Detected",
  "description": "This trigger is responsible for handling the alert Malware detected by Microsoft Defender for Endpoint",
  "trigger_name": "Malware detected by Microsoft Defender for Endpoint",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "SEARCH_FIELD": "alert_name",
          "SEARCH_TYPE": "CONTAINS",
          "SEARCH_VALUE": "Malware detected by Microsoft Defender for Endpoint"
        },
        {
          "SEARCH_FIELD": "alert_source",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "Correlation"
        }
      ]
    }
  }
}