This is the Trace Id: ffe7abaf85b6259942d79c33476c21f5
Skip to main content Microsoft Defender Microsoft Entra Microsoft Intune Microsoft Purview Microsoft Security Copilot Microsoft Sentinel View all products AI-powered cybersecurity Cloud security Data security & governance Identity & network access Privacy & risk management Security for AI Small and medium business Unified SecOps Zero Trust Pricing Services Partners Why Microsoft Security Cybersecurity awareness Customer stories Security 101 Product trials How we protect Microsoft Industry recognition Microsoft Security Insider Microsoft Digital Defense Report Security Response Center Microsoft Security Blog Microsoft Security Events Microsoft Tech Community Documentation Technical Content Library Training & certifications Compliance Program for Microsoft Cloud Microsoft Trust Center Security Engineering Portal Service Trust Portal Microsoft Secure Future Initiative Business Solutions Hub Contact Sales Start free trial Microsoft Security Azure Dynamics 365 Microsoft 365 Microsoft Teams Windows 365 Microsoft AI Azure Space Mixed reality Microsoft HoloLens Microsoft Viva Quantum computing Sustainability Education Automotive Financial services Government Healthcare Manufacturing Retail Find a partner Become a partner Partner Network Microsoft Marketplace Software companies Blog Microsoft Advertising Developer Center Documentation Events Licensing Microsoft Learn Microsoft Research View Sitemap

Microsoft Defender Threat Intelligence

Unmask and neutralize modern adversaries and cyberthreats such as ransomware.
OVERVIEW

Uncover your adversaries

Expose and eliminate modern cyberthreats and their infrastructure using dynamic threat intelligence.
  • Understand your adversaries and their online infrastructures to identify your potential cyberthreat exposures using a complete map of the internet.
    A person looking at a laptop.
  • Discover the full scope of a cyberattack. Understand an online adversary’s entire toolkit, prevent access by all their machines and known entities, and continuously block IP addresses or domains.
    A person using a laptop.
  • Extend the reach and visibility of your existing security investments. Gain more context and understanding of cyberthreats with Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Security Copilot.
    A man wearing glasses looks at a computer screen.
How it works

How to use Microsoft Defender Threat Intelligence

Microsoft tracks more than 78 trillion signals daily, helping security teams identify vulnerabilities with greater efficacy and stay ahead of today's cyberthreats.
Capabilities

Capabilities

Uncover and help eliminate cyberthreats with Defender Threat Intelligence.
Get a complete view of the internet and track day-to-day changes. Create threat intelligence for your own business to understand and reduce exposure.
Microsoft Defender Threat Intelligence page showing Aqua Blizzard indicators list with domains and SHA-256 hashes.
Back to tabs
RESOURCES

Additional resources

Next steps

Protect everything

 Make your future more secure. Explore your security options today.

Follow Microsoft Security

English (United States) Consumer Health Privacy Sitemap Contact Microsoft Privacy Manage cookies Terms of use Trademarks Safety & eco Recycling About our ads