Endpoint security
AvailableMicrosoft Defender for Business
By Microsoft
Imports the alerts Microsoft Defender for Business (and Defender for Endpoint) raises for your tenant into the Qorionix incident queue, lists the devices Defender protects beside the hosts running the Qorionix sensor, exports the CVE findings its Threat & Vulnerability Management module has for each device, and carries out isolate, release-from-isolation and antivirus scan through the Defender for Endpoint API — each one through the same approval queue and audit trail as an action on our own sensor. Requires one Entra app registration with Microsoft Graph: SecurityAlert.Read.All; WindowsDefenderATP: Machine.Read.All, Machine.Isolate, Machine.Scan, Vulnerability.Read.All (application permissions, admin consent required).
What you can connect
Capabilities and availability
Each capability has its own setup and status. Review the details before enabling it for your organisation.
Endpoint telemetry
AvailableSetup available in the console
vuln findings
AvailableSetup available in the console
More in Endpoint security
Endpoint security
Bitdefender GravityZone
Imports Bitdefender GravityZone incidents and endpoint inventory from a tenant's own GravityZone console into Qorionix XDR. Read-only: does not isolate endpoints or run remediation tasks.
Endpoint security
CrowdStrike Falcon
Imports the alerts CrowdStrike Falcon raises for your tenant and the devices it protects into the Qorionix XDR incident queue, beside your own sensor and Microsoft Defender. Network containment and other Falcon response actions are not available through this integration yet.
Endpoint security
ESET PROTECT
Imports ESET PROTECT detections and device inventory from a tenant's own ESET PROTECT Cloud or on-premises console into Qorionix XDR. Read-only: does not isolate devices or run cleanup tasks.