Office 365 Threat Intelligence

Threat intelligence capabilities in Office 365 Advanced Threat Protection help security analysts and administrators protect their organization's Office 365 users by:

  1. Making it easy to identify, monitor and understand attacks

  2. Helping to quickly address threats in Exchange Online and SharePoint Online

  3. Providing insights and knowledge to help prevent attacks against their organization

Important

Threat Intelligence is now part of in Office 365 Advanced Threat Protection Plan 2, which is included in in certain subscriptions, such as Microsoft 365 Enterprise, Microsoft 365 Business, Office 365 Enterprise E5, Office 365 Education A5, etc. If your organization has a subscription that does not include Office 365 ATP, you can potentially purchase ATP as an add-on. For more information, see Office 365 Advanced Threat Protection plans and pricing and the Office 365 Advanced Threat Protection Service Description.

What's changing?

Formerly, Office 365 Threat Intelligence was included in subscriptions, such as Office 365 Enterprise E5. This is still the case, although Threat Intelligence features are now part of Office 365 Advanced Threat Protection Plan 2 (and this is included in Office 365 Enterprise E5).

In addition, Office 365 Threat Intelligence was formerly available for purchase as an add-on for Office 365 for business customers. Now, Threat Intelligence is included in Office 365 Advanced Threat Protection Plan 2. To learn more, see Office 365 Advanced Threat Protection plans and pricing.

Here's what all this means:

  • If your organization already has Office 365 Enterprise E5, then you already have Advanced Threat Protection Plan 2, and this includes Threat Intelligence capabilities.

  • If your organization previously had Office 365 Threat Intelligence (but not Office 365 Advanced Threat Protection) as an add-on to another Office 365 subscription, then you will have Office 365 Advanced Threat Protection Plan 2. This includes Advanced Threat Protection and Threat Intelligence capabilities.

  • If your organization previously had Office 365 Advanced Threat Protection (but not Office 365 Threat Intelligence) as an add-on to another Office 365 subscription, then you will have Office 365 Advanced Threat Protection Plan 1. This includes Advanced Threat Protection (but not Threat Intelligence capabilities).

For more information, see Office 365 Advanced Threat Protection plans and pricing and the Office 365 Advanced Threat Protection Service Description

Get started with threat intelligence capabilities

Use the following resources to learn more about threat intelligence, and how you can use it to keep people in your organization safer.

Protect against threats in Office 365

Office 365 Advanced Threat Protection

Permissions in the Office 365 Security & Compliance Center