title

Get email notifications for Threat analytics updates

ms.reviewer

description

Set up email notifications to get notified of new Threat analytics reports in Microsoft Defender XDR.

ms.service

defender-xdr

f1.keywords

NOCSH

ms.author

pauloliveria

author

poliveria

ms.localizationpriority

medium

manager

deniseb

audience

ITPro

ms.collection

m365-security

m365initiative-m365-defender

tier1

ms.topic

how-to

ms.custom

seo-marvel-apr2020

search.appverid

met150

ms.date

01/17/2025

appliesto

Microsoft Defender XDR

Get email notifications for Threat analytics updates

You can set up email notifications that send you updates on threat analytics reports.

Set up email notifications for report updates

To set up email notifications for threat analytics reports, perform the following steps:

In the navigation pane of the Microsoft Defender portal, select Settings > Microsoft Defender XDR. Under General, select Email notifications.
In the Threat analytics tab, select + Create a notification rule. A flyout appears.
Follow the steps listed in the flyout. First, give your new rule a name. The description field is optional, but a name is required. You can toggle the rule on or off using the checkbox under the description field.

[!NOTE] The name and description fields for a new notification rule only accept English letters and numbers. Punctuations like spaces, dashes, underscores, aren't supported.
Choose the reports you want to be notified about. You can choose to be updated about all newly published or updated reports or only those reports of a certain type or with a specific tag.
Add at least one recipient to receive the notification emails. You can also use this screen to send a test email to check the notification settings.
Review your new rule. Select Edit at the end of each subsection to change any of the settings. Once your review is complete, select Create rule.
Select Done to complete the process and close the flyout.