Microsoft Defender for Business is now in preview, and will roll out gradually to customers and IT Partners who sign-up here to request it. We will onboard an initial set of customers and partners in the coming weeks and will expand the preview leading up to general availability. Note that preview will launch with an initial set of scenarios, and we will be adding capabilities regularly.
Some information in this article relates to prereleased products/services that might be substantially modified before they are commercially released. Microsoft makes no warranties, express or implied, for the information provided here.
You can set up email notifications for your security team. Then, as alerts are generated, or new vulnerabilities are discovered, people on your security team will be notified automatically.
What to do
- Learn about types of email notifications.
- View and edit email notification settings.
- Proceed to your next steps.
Types of email notifications
When you set up email notifications, you can choose from two types, as described in the following table:
|Vulnerabilities||Whenever any new exploits or vulnerability events are detected, recipients receive an email.|
|Alerts & vulnerabilities||When alerts are generated because threats are detected on devices, or when any new exploits or vulnerability events are detected, recipients receive an email.|
Email notifications are not the only way your security team can find out about new alerts or vulnerabilities.
Email notifications are a convenient way to help keep your security team informed, in real time. But there are others! For example, whenever your security team signs into the Microsoft 365 Defender portal (https://security.microsoft.com), they’ll see cards highlighting new threats, alerts, and vulnerabilities. Defender for Business (preview) is designed to highlight important information that your security team cares about as soon as they sign in.
Your security team can also choose Incidents in the navigation pane to view information. To learn more, see View and manage incidents in Microsoft Defender for Business (preview).
View and edit email notifications
To view or edit email notification settings for your company, follow these steps:
- Go to the Microsoft 365 Defender portal (https://security.microsoft.com) and sign in.
- In the navigation pane, select Settings, and then select Endpoints. Then, under General, select Email notifications.
- Review the information on the Alerts and Vulnerabilities tabs.
- If you don’t see any items listed on the Alerts tab, you can create a rule for people to be notified when alerts are generated. To get help with this task, see Create rules for alert notifications.
- If you don’t see any items listed on the Vulnerabilities tab, you can create a rule for people to be notified whenever a new vulnerability is discovered. To get help with this task, see Create rules for vulnerability events.
- If you do have rules created, select a rule to edit it. You can also delete a rule.