Note: The playbooks for Microsoft Defender for Endpoint have been deprecated because of the change in April 2026 by Microsoft to deprecate the tiIndicator object. Please see this support article.
Introduction
This integration with Microsoft Defender for Endpoint has two components - Block IPs and Domains on Microsoft Defender for Endpoint with Recorded Future and Command and Control Security Control Feed
Support
Please reach out to Recorded Future support at support@recordedfuture.com for any queries and assistance needed during the installation.