Microsoft defender for endpoint integration without the SIR

[Dr Atul G- LNG]

Sorry, could you please clarify your exact requirement? Are you trying to integrate Microsoft Defender with ServiceNow?"

https://www.servicenow.com/docs/bundle/zurich-security-management/page/product/secops-integration-si...

As far as I know, ServiceNow does not recommend proceeding without using SIR."

[sylvainbarr]

Thanks for the quick reply, I did add details, I was to quick on the post button. I am aware that it's not recommended, my client does not have the budget to go with SIR yet. currently we are using an e-mail/inbound action to generate incident, and we want to move away from that approach.

[sylvainbarr]

Sorry for the lack of details; 

So I have to integrate Microsoft Defender for Endpoint (MDE)t with ServiceNow without the SIR (SecOps). This integration will be used to generate incidents based on specific triggers on the MDE side. I know Microsoft Defender for cloud apps has an integration plug in that can be used as a point to point or in conjonction with Logic apps integration engine. My question, is there a similar available integration option for MDE natively?

[Dr Atul G- LNG]

Hi @sylvainbarr 

To the best of my knowledge, there isn’t a native integration available for MDE (Microsoft Defender for Endpoint).