Microsoft Defender for Business
Endpoint protection

Set up Email Notifications for Your Security Team - Microsoft Defender for Business | Microsoft Learn

In brief

The page title and wording were updated, the introductory “What to do” section was removed, and guidance for alert, vulnerability, and user-assignment rules was simplified.

What Defender admins need to know

Use the revised guidance when configuring notifications; no administrator action is specified.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Set up email notificationsEmail Notifications for your security teamYour Security Team - Microsoft Defender for Business | Microsoft Learn

This article describes how to set up email notifications for your security team.

Visual depicting step 4 - set up email notifications for your security team.

When you can set up email notifications for your security team, they can beget notified viaby email whenever any alerts are generated, or new vulnerabilities are discovered.

What to do

  1. Learn about types of email notifications.
  2. View and edit email notification settings.
  3. Proceed to your next steps.

Types of email notifications

Email notifications aren't the only way your security team can find out about new alerts or vulnerabilities. For example:

  • Whenever your security team signs intoin to the Microsoft Defender portal, they see cards highlightingthat highlight new threats, alerts, and vulnerabilities. Microsoft Defender for Business is designed to highlight important information that your security team cares about as soon as they sign in.
  • The Incidents page. To learn more, see View and manage incidents in Defender for Business.

View and edit email notifications

  1. In the navigation pane, select Settings, and then select Endpoints. Then, under General, select Email notifications.

  2. Review the information on the Alerts and Vulnerabilities tabs.

    • If you don't see any items listed on the Alerts tab, you can create a rule for people to be notified when alerts are generated. To get help with this task, seeSee Create rules for alert notifications.
    • If you don't see any items listed on the Vulnerabilities tab, you can create a rule for people to be notified whenever a new vulnerability is discovered. To get help with this task, seeSee Create rules for vulnerability events.
    • If you do have rules created, select a rule to edit it. You can also delete a rule.

Important

When you set up email notifications in Defender for Business, you must assign the notification rules to specific users. Defender for Business doesn't use role-based access control like Defender for Endpoint does.

You can't apply email notifications to device groups in Defender for Business. \ No newline at end of file