Hunt for threats in Microsoft 365

With threat hunting capabilities in the Microsoft 365 security center, you can proactively find threats in your organization affecting email and data, devices, and identities. From the Hunting screen, you can access threat hunting tools made available by various solutions:

Hunting page

Hunt with Microsoft Threat Protection

Turn on Microsoft Threat Protection to get the advanced hunting query interface directly in the Microsoft 365 security center. With advanced hunting, you can create single queries that look into data from both Microsoft Defender ATP, covering data from onboarded devices, and Office 365 ATP, providing data from emails.